fix: only check event type ownership if not admin

2022-06-15 22:57:49 +02:00
parent 514a98f9e0
commit d8d0d42374
1 changed files with 3 additions and 4 deletions
@@ -27,10 +27,9 @@ export async function eventTypeById(
    select: { eventTypes: true },
  });
  const userEventTypes = data.eventTypes.map((eventType) => eventType.id);
-
-  if (!isAdmin || !userEventTypes.includes(safeQuery.data.id))
-    res.status(401).json({ message: "Unauthorized" });
-  else {
+  if (!isAdmin) {
+    if (!userEventTypes.includes(safeQuery.data.id)) res.status(401).json({ message: "Unauthorized" });
+  } else {
    switch (method) {
      /**
       * @swagger