watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2026-02-13 17:15:37 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Fix isAdmin check. Fix Schema.

Browse source
This commit is contained in:
Brian Cao 2022-11-21 16:44:42 -08:00
parent 371425ab60
commit d60ad1c782
4 changed files with 18 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

6
pages/api/websites/index.ts
View file

@ -5,6 +5,8 @@ import { useAuth, useCors } from 'lib/middleware';
import { NextApiResponse } from 'next';
import { methodNotAllowed, ok } from 'next-basics';
import { createWebsite, getAllWebsites, getWebsitesByUserId } from 'queries';
import { checkPermission } from 'lib/auth';
import { UmamiApi } from 'lib/constants';
export interface WebsitesRequestQuery {
include_all?: boolean;
@ -25,12 +27,14 @@ export default async (
await useAuth(req, res);
const {
user: { id: userId, isAdmin },
user: { id: userId },
} = req.auth;
if (req.method === 'GET') {
const { include_all } = req.query;
const isAdmin = await checkPermission(req, UmamiApi.Permission.Admin);
const websites =
isAdmin && include_all ? await getAllWebsites() : await getWebsitesByUserId(userId);