mirror of
https://github.com/sudoxnym/habitica-self-host.git
synced 2026-07-13 17:52:22 +00:00
filter out bank challenge if is not userSupport
This commit is contained in:
parent
e0dc608fd8
commit
2b4ffdf27f
1 changed files with 8 additions and 2 deletions
|
|
@ -64,9 +64,15 @@ api.purchaseHistory = {
|
||||||
req.checkParams('memberId', res.t('memberIdRequired')).notEmpty().isUUID();
|
req.checkParams('memberId', res.t('memberIdRequired')).notEmpty().isUUID();
|
||||||
const validationErrors = req.validationErrors();
|
const validationErrors = req.validationErrors();
|
||||||
if (validationErrors) throw validationErrors;
|
if (validationErrors) throw validationErrors;
|
||||||
const transactions = await Transaction
|
let transactions = await Transaction
|
||||||
.find({ userId: req.params.memberId })
|
.find({ userId: req.params.memberId })
|
||||||
.sort({ createdAt: -1 });
|
.sort({ createdAt: -1 })
|
||||||
|
.exec();
|
||||||
|
|
||||||
|
if (!res.locals.user.hasPermission('userSupport')) {
|
||||||
|
transactions = transactions.filter(t => t.transactionType !== 'create_bank_challenge');
|
||||||
|
}
|
||||||
|
|
||||||
res.respond(200, transactions);
|
res.respond(200, transactions);
|
||||||
},
|
},
|
||||||
};
|
};
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue