Fx: users and roles needs login for admin only to be accessed

atlp-rwanda · Jul 4, 2024 · d310838 · d310838
1 parent 71be085
commit d310838
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/routes/roleRoutes.ts b/src/routes/roleRoutes.ts
@@ -9,7 +9,7 @@ import { isPasswordOutOfDate } from '../middlewares/isPasswordOutOfDate';
 const RoleRouter = express.Router();
 
 RoleRouter.post('/', isLoggedIn,isPasswordOutOfDate, isAdmin, validateSchema(roleSchema), roleController.createRole);
-RoleRouter.get('/',roleController.getRoles);
+RoleRouter.get('/',isLoggedIn,isAdmin,roleController.getRoles);
 RoleRouter.patch('/:id', isLoggedIn,isPasswordOutOfDate, isAdmin, validateSchema(roleSchema),roleController.updateRole);
 RoleRouter.delete('/:id', isLoggedIn,isPasswordOutOfDate, isAdmin, roleController.deleteRole);
 

diff --git a/src/routes/userRoutes.ts b/src/routes/userRoutes.ts
@@ -19,7 +19,7 @@ import { isPasswordOutOfDate } from "../middlewares/isPasswordOutOfDate";
 import { isVerified } from "../middlewares/isVerified";
 const userRoutes = Router();
 
-userRoutes.get("/", fetchAllUsers);
+userRoutes.get("/",isLoggedIn,isAdmin, fetchAllUsers);
 userRoutes.put("/passwordupdate", isLoggedIn, validateSchema(passwordUpdateSchema), updatePassword)
 userRoutes.post("/login", emailValidation,validateSchema(logInSchema),isDisabled,isVerified,userLogin);
 userRoutes.post("/register", emailValidation, validateSchema(signUpSchema), createUserController);