mirror of
https://github.com/kremalicious/umami.git
synced 2024-11-22 01:46:58 +01:00
Fixed websites query.
This commit is contained in:
parent
905b480c13
commit
66d7a815fc
@ -59,7 +59,7 @@ export async function canViewWebsite({ user, shareToken }: Auth, websiteId: stri
|
||||
return !!(await findTeamWebsiteByUserId(websiteId, user.id));
|
||||
}
|
||||
|
||||
export async function canViewAllWebsite({ user }: Auth) {
|
||||
export async function canViewAllWebsites({ user }: Auth) {
|
||||
return user.isAdmin;
|
||||
}
|
||||
|
||||
|
@ -12,7 +12,7 @@ export function salt() {
|
||||
return hash(secret(), ROTATING_SALT);
|
||||
}
|
||||
|
||||
export function uuid(...args: [any]) {
|
||||
export function uuid(...args: any) {
|
||||
if (!args.length) return v4();
|
||||
|
||||
return v5(hash(...args, salt()), v5.DNS);
|
||||
|
@ -1,4 +1,4 @@
|
||||
import { canCreateWebsite, canViewAllWebsite } from 'lib/auth';
|
||||
import { canCreateWebsite, canViewAllWebsites } from 'lib/auth';
|
||||
import { uuid } from 'lib/crypto';
|
||||
import { useAuth, useCors, useValidate } from 'lib/middleware';
|
||||
import { NextApiRequestQueryBody, SearchFilter } from 'lib/types';
|
||||
@ -41,7 +41,7 @@ export default async (
|
||||
} = req.auth;
|
||||
|
||||
if (req.method === 'GET') {
|
||||
if (canViewAllWebsite(req.auth)) {
|
||||
if (await canViewAllWebsites(req.auth)) {
|
||||
const websites = getWebsites(req.query, {
|
||||
include: {
|
||||
teamWebsite: {
|
||||
|
Loading…
Reference in New Issue
Block a user