sasjs/server
1
0
Fork 0
mirror of https://github.com/sasjs/server.git synced 2026-01-08 07:00:04 +00:00
Code Issues Projects Releases Wiki Activity

chore: throw error when adding permission for admin user

Browse Source
This commit is contained in:
Sabir Hassan
2022-06-24 23:19:19 +05:00
parent 907aa485fd
commit 35439d7d51
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
api/src/controllers/permission.ts
View File

@@ -167,10 +167,14 @@ const createPermission = async ({
const userInDB = await User.findOne({ id: principalId }) const userInDB = await User.findOne({ id: principalId })
if (!userInDB) throw new Error('User not found.') if (!userInDB) throw new Error('User not found.')
if (userInDB.isAdmin)
throw new Error('Can not add permission for admin user.')
const alreadyExists = await Permission.findOne({ const alreadyExists = await Permission.findOne({
uri, uri,
user: userInDB._id user: userInDB._id
}) })
if (alreadyExists) if (alreadyExists)
throw new Error('Permission already exists with provided URI and User.') throw new Error('Permission already exists with provided URI and User.')