Add admin check. (#1716)

* Add admin check. * Fix teamId check.
2022-12-27 15:18:58 -08:00
parent c90bd941b5
commit 561cde6e7e
20 changed files with 133 additions and 98 deletions
--- a/pages/api/users/[id]/password.ts
+++ b/pages/api/users/[id]/password.ts
@@ -29,12 +29,9 @@ export default async (

  const { currentPassword, newPassword } = req.body;
  const { id } = req.query;
-  const {
-    user: { id: userId, isAdmin },
-  } = req.auth;

  if (req.method === 'POST') {
-    if (!isAdmin && !(await canUpdateUser(userId, id))) {
+    if (!(await canUpdateUser(req.auth, id))) {
      return unauthorized(res);
    }