kavehhn/gameno-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: treat SuperAdmin role name case-insensitively in permission checks

Browse Source 
The seeded role is SuperAdmin, but the middleware only matched superAdmin, so SuperAdmin could be denied documents and other new permissions.
This commit is contained in:
kavehhn
2026-08-15 03:27:21 +03:30
parent e1772a2559
commit 877dfa65d5
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
middlewares/permissionMiddleware.js
+2 -2
View File
@@ -14,8 +14,8 @@ const requirePermission = (requiredPermission) => {
return next(new AppError('FORBIDDEN')); return next(new AppError('FORBIDDEN'));
} }
// Check if user is superAdmin (by role name or system status) const roleName = String(role.name || '').toLowerCase();
if (role.name === 'superAdmin' || (role.isSystem && role.permissions.includes('*'))) { if (roleName === 'superadmin' || (role.isSystem && role.permissions.includes('*'))) {
return next(); return next();
} }