Updated the backend so the users list only returns the correct ones

src/pages/(admin)/Lists/UserList.tsx

@@ -80,19 +80,15 @@ export default function UserList({
 
 	useEffect(() => {
 		(async () => {
-			if (user && users) {
-				const filterUsers = ["corporate", "teacher", "mastercorporate"].includes(user.type)
-					? users.filter((u) => groups.flatMap((g) => g.participants).includes(u.id))
-					: users;
-
-				const filteredUsers = filters.reduce((d, f) => d.filter(f), filterUsers);
+			if (users) {
+				const filteredUsers = filters.reduce((d, f) => d.filter(f), users);
 				const sortedUsers = await asyncSorter<User>(filteredUsers, sortFunction);
 
 				setDisplayUsers([...sortedUsers]);
 			}
 		})();
 		// eslint-disable-next-line react-hooks/exhaustive-deps
-	}, [user, users, sorter, groups]);
+	}, [users, sorter]);
 
 	const deleteAccount = (user: User) => {
 		if (!confirm(`Are you sure you want to delete ${user.name}'s account?`)) return;

src/pages/api/users/list.ts

@@ -4,6 +4,8 @@ import {app} from "@/firebase";
 import {getFirestore, collection, getDocs} from "firebase/firestore";
 import {withIronSessionApiRoute} from "iron-session/next";
 import {sessionOptions} from "@/lib/session";
+import {getGroupsForUser} from "@/utils/groups.be";
+import {uniq} from "lodash";
 
 const db = getFirestore(app);
 
@@ -16,11 +18,17 @@ async function handler(req: NextApiRequest, res: NextApiResponse) {
 	}
 
 	const snapshot = await getDocs(collection(db, "users"));
+	const users = snapshot.docs.map((doc) => ({
+		id: doc.id,
+		...doc.data(),
+	}));
 
-	res.status(200).json(
-		snapshot.docs.map((doc) => ({
-			id: doc.id,
-			...doc.data(),
-		})),
-	);
+	if (!req.session.user) return res.status(200).json(users);
+	if (req.session.user.type === "admin" || req.session.user.type === "developer") return res.status(200).json(users);
+
+	const adminGroups = await getGroupsForUser(req.session.user.id);
+	const groups = await Promise.all(adminGroups.flatMap((x) => x.participants).map(async (x) => await getGroupsForUser(x)));
+	const participants = uniq([...adminGroups.flatMap((x) => x.participants), ...groups.flat().flatMap((x) => x.participants)]);
+
+	res.status(200).json(users.filter((x) => participants.includes(x.id)));
 }