Merge pull request #21 from ciatph/dev

v1.0.6
ciatph · Apr 7, 2022 · 0ad7288 · 0ad7288
2 parents f17dd26 + ca14a51
commit 0ad7288
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/server/src/middleware/superadmin.js b/server/src/middleware/superadmin.js
@@ -1,7 +1,13 @@
 const { ACCOUNT_LEVEL } = require('../utils/constants')
 
 const isSuperAdmin = async (req, res, next) => {
-  if (req.user.account_level === ACCOUNT_LEVEL.SUPERADMIN) {
+  let level = 0
+
+  if (req.user.account_level) {
+    level = parseInt(req.user.account_level)
+  }
+
+  if (level === ACCOUNT_LEVEL.SUPERADMIN) {
     next()
   } else {
     res.status(403).send('Unauthorized. Not a superadmin.')

diff --git a/server/src/utils/constants.js b/server/src/utils/constants.js
@@ -1,6 +1,6 @@
 const ACCOUNT_LEVEL = {
-  SUPERADMIN: '1',
-  ADMIN: '2'
+  SUPERADMIN: 1,
+  ADMIN: 2
 }
 
 module.exports = {