This commit is contained in:
Baris Usakli
2019-03-26 12:24:28 -04:00
parent 63e16ec0a2
commit 8f55ab1340
3 changed files with 8 additions and 5 deletions

View File

@@ -93,6 +93,9 @@ module.exports = function (middleware) {
};
middleware.canViewUsers = function canViewUsers(req, res, next) {
if (parseInt(res.locals.uid, 10) === req.uid) {
return next();
}
privileges.global.can('view:users', req.uid, function (err, canView) {
if (err || canView) {
return next(err);