26 lines
735 B
JavaScript
26 lines
735 B
JavaScript
|
const User = require('../models/user.model');
|
||
|
|
const constant = require('../util/constant')
|
||
|
|
const AdminOrOwner = async(req,res,next)=> {
|
||
|
|
try{
|
||
|
|
let id = req.params.id;
|
||
|
|
const user = await User.findById(req.userId);
|
||
|
|
if(user._id == id || user.userTypes ==constant.userTypes.admin) return next();
|
||
|
|
else{
|
||
|
|
console.log('Only admin or user can access this field');
|
||
|
|
return res.status(400).send({
|
||
|
|
message : 'Invalid authorization'
|
||
|
|
})
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
}catch(err){
|
||
|
|
console.log('Error inside isAdminorUser',err);
|
||
|
|
res.status(500).send({
|
||
|
|
message : 'Internal Server Error'
|
||
|
|
})
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
module.exports = {
|
||
|
|
AdminOrOwner
|
||
|
|
}
|