Add requireResponsibleForGroup

+ Update controllers
This commit is contained in:
Stephan
2022-05-29 14:47:32 +02:00
parent 197fd9c654
commit cd0cb00106
5 changed files with 20 additions and 5 deletions
+1 -1
View File
@@ -164,7 +164,7 @@ export const updateEvent = async (req: Request<{ pid: string }>, res: Response)
date: DataType.DATETIME,
briefDescription: DataType.STRING,
["fullDescription?"]: DataType.STRING,
})
}, result.error)
);
}
+4 -2
View File
@@ -3,6 +3,7 @@ import { PrismaClientKnownRequestError, PrismaClientUnknownRequestError } from "
import { Request, Response } from "express";
import { z } from "zod";
import prisma from "../lib/prisma";
import { requireResponsibleForGroup } from "../Middleware/auth/auth";
import NotFoundError from "../Middleware/error/NotFoundError";
import { createInsufficientPermissionsError, DataType, generateError, generateInvalidBodyError, genericError, handleCreateByName } from "./common";
@@ -126,9 +127,8 @@ export const createGroup = async (req: Request<{ organisationPid: string }, {},
);
};
// requires: auth(STANDARD with GROUP permission)
export const updateGroup = async (req: Request<{ pid: string }>, res: Response) => {
//insert TeamleaderAuth
const result = updateGroupBody.safeParse(req.body);
if(result.success === false){
@@ -147,6 +147,8 @@ export const updateGroup = async (req: Request<{ pid: string }>, res: Response)
const body = result.data;
const { pid } = req.params;
requireResponsibleForGroup(req.auth, pid)
try {
const group = await prisma.group.update({
where: { pid },