From 2da21be7c3c16799a2e57153437e72b5a7f47dac Mon Sep 17 00:00:00 2001 From: Jules Laplace Date: Fri, 17 Mar 2017 01:55:00 +0100 Subject: test user roles --- src/services/user/hooks/index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/services/user/hooks/index.js') diff --git a/src/services/user/hooks/index.js b/src/services/user/hooks/index.js index c4ed466..80c3848 100644 --- a/src/services/user/hooks/index.js +++ b/src/services/user/hooks/index.js @@ -58,7 +58,7 @@ function validateRoleOnUpdate () { if (userRole.toString() === 'user' && dataRole.toString() !== 'user') { reject(new _feathersErrors2.default.Forbidden('You do not have permission to change your role.')); } - else if (userRole.toString() === 'manager' && dataRole.toString() !== 'user') { + else if (userRole.toString() === 'manager' && dataRole.toString() === 'admin') { reject(new _feathersErrors2.default.Forbidden('You do not have permission to change this user\'s role.')); } else { -- cgit v1.2.3-70-g09d2