fix: only check event type ownership if not admin

2022-06-04 02:26:16 +02:00
parent 0fc374c810
commit 0eed3e51e4
1 changed files with 3 additions and 4 deletions
@@ -27,10 +27,9 @@ export async function eventTypeById(
    select: { eventTypes: true },
  });
  const userEventTypes = data.eventTypes.map((eventType) => eventType.id);
-
-  if (!isAdmin || !userEventTypes.includes(safeQuery.data.id))
-    res.status(401).json({ message: "Unauthorized" });
-  else {
+  if (!isAdmin) {
+    if (!userEventTypes.includes(safeQuery.data.id)) res.status(401).json({ message: "Unauthorized" });
+  } else {
    switch (method) {
      /**
       * @swagger