1
0
Fork 0
mirror of synced 2024-06-28 11:00:55 +12:00

prevent redirect on app overview by allowing builders access to user endpoint

This commit is contained in:
Martin McKeaveney 2022-07-13 11:49:23 +01:00
parent 92dcd640a1
commit 2b42545b77

View file

@ -69,7 +69,7 @@ router
)
.get("/api/global/users/tenant/:id", controller.tenantUserLookup)
// global endpoint but needs to come at end (blocks other endpoints otherwise)
.get("/api/global/users/:id", adminOnly, controller.find)
.get("/api/global/users/:id", builderOrAdmin, controller.find)
// DEPRECATED - use new versions with self API
.get("/api/global/users/self", selfController.getSelf)
.post(