yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-09-25 16:29:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Populate only role relation to authorize user

Browse Source
This commit is contained in:
Victor LAMBERT 2019-11-16 01:05:21 +01:00
parent c603ec3499
commit cff8fd9041
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
packages/strapi-plugin-users-permissions/config/policies/permissions.js
View File

@ -16,11 +16,11 @@ module.exports = async (ctx, next) => {
if (isAdmin) {
ctx.state.admin = await strapi
.query('administrator', 'admin')
.findOne({ id });
.findOne({ id }, ['role']);
} else {
ctx.state.user = await strapi
.query('user', 'users-permissions')
.findOne({ id });
.findOne({ id }, ['role']);
}
} catch (err) {
return handleErrors(ctx, err, 'unauthorized');