Made sure it only happens for corporate students
This commit is contained in:
@@ -110,8 +110,12 @@ async function handler(req: NextApiRequest, res: NextApiResponse) {
|
||||
const credential = await signInWithEmailAndPassword(auth, req.session.user.email, updatedUser.password);
|
||||
await updateEmail(credential.user, updatedUser.email);
|
||||
|
||||
const groups = ((await getDocs(collection(db, "groups"))).docs.map((x) => ({...x.data(), id: x.id})) as Group[]).filter((x) =>
|
||||
x.participants.includes(req.session.user!.id),
|
||||
if (req.session.user.type === "student") {
|
||||
const corporateAdmins = ((await getDocs(collection(db, "users"))).docs.map((x) => ({...x.data(), id: x.id})) as User[])
|
||||
.filter((x) => x.type === "corporate")
|
||||
.map((x) => x.id);
|
||||
const groups = ((await getDocs(collection(db, "groups"))).docs.map((x) => ({...x.data(), id: x.id})) as Group[]).filter(
|
||||
(x) => x.participants.includes(req.session.user!.id) && corporateAdmins.includes(x.admin),
|
||||
);
|
||||
|
||||
groups.forEach(async (group) => {
|
||||
@@ -121,6 +125,7 @@ async function handler(req: NextApiRequest, res: NextApiResponse) {
|
||||
{merge: true},
|
||||
);
|
||||
});
|
||||
}
|
||||
} catch {
|
||||
res.status(400).json({error: "E002", message: errorMessages.E002});
|
||||
return;
|
||||
|
||||
Reference in New Issue
Block a user