xfarrow
/
blink
mirror of https://github.com/xfarrow/blink
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

update

This commit is contained in:
xfarrow 2024-02-15 18:00:46 +01:00
parent 4bf1c71165
commit a4ced1dee1
2 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/apis/BlinkApiUsageExample.json
View File

File diff suppressed because one or more lines are too long

21
backend/apis/nodejs/api_controller.js
View File

@ -526,6 +526,8 @@ async function deleteOrganizationPost(req, res){
* *
* Add an Administrator to an Organization. Allowed only if the * Add an Administrator to an Organization. Allowed only if the
* logged user is an Administrator themselves. * logged user is an Administrator themselves.
*
* Required field(s): organization_id, person_id
*/ */
async function addOrganizationAdmin(req, res){ async function addOrganizationAdmin(req, res){
@ -558,20 +560,23 @@ async function addOrganizationAdmin(req, res){
} }
} }
// DELETE // todo check correctness
/**
* DELETE Request
*
* Deletes a Person from the list of Administrators of an Organization.
* The logged user can only remove themselves.
*
* Required field(s): organization_id
* @returns
*/
async function removeOrganizationAdmin(req, res){ async function removeOrganizationAdmin(req, res){
// Ensure that the required fields are present before proceeding // Ensure that the required fields are present before proceeding
if (!req.body.organization_id || !req.body.person_id) { if (!req.body.organization_id) {
return res.status(400).json({ error : "Invalid request"}); return res.status(400).json({ error : "Invalid request"});
} }
// I can remove only myself from the list of administrators
// TODO: What's the point for having 'body.person_id' then?
if(req.body.person_id != req.jwt.person_id){
return res.status(403).json({ error : "Forbidden"});
}
try{ try{
knex.transaction(async (trx) => { knex.transaction(async (trx) => {
await trx('OrganizationAdministrator') await trx('OrganizationAdministrator')