From 3310b9307de602198e2df64e8e56631ce553c794 Mon Sep 17 00:00:00 2001
From: Agusti Fernandez Pardo <git@agusti.me>
Date: Wed, 15 Jun 2022 21:16:46 +0200
Subject: [PATCH] fix: undo changes in users

---
 pages/api/users/[id].ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pages/api/users/[id].ts b/pages/api/users/[id].ts
index bf70a7a785..65b864c652 100644
--- a/pages/api/users/[id].ts
+++ b/pages/api/users/[id].ts
@@ -4,6 +4,7 @@ import prisma from "@calcom/prisma";
 
 import { withMiddleware } from "@lib/helpers/withMiddleware";
 import type { UserResponse } from "@lib/types";
+import { isAdminGuard } from "@lib/utils/isAdmin";
 import {
   schemaQueryIdParseInt,
   withValidQueryIdTransformParseInt,
@@ -11,7 +12,7 @@ import {
 import { schemaUserEditBodyParams, schemaUserReadPublic } from "@lib/validations/user";
 
 export async function userById(
-  { method, query, body, userId, isAdmin }: NextApiRequest,
+  { method, query, body, userId }: NextApiRequest,
   res: NextApiResponse<UserResponse>
 ) {
   const safeQuery = schemaQueryIdParseInt.safeParse(query);
@@ -20,6 +21,7 @@ export async function userById(
     res.status(400).json({ message: "Your query was invalid" });
     return;
   }
+  const isAdmin = await isAdminGuard(userId);
   // Here we only check for ownership of the user if the user is not admin, otherwise we let ADMIN's edit any user
   if (!isAdmin) {
     if (safeQuery.data.id !== userId) res.status(401).json({ message: "Unauthorized" });