removed coach and admin access for player by id

This commit is contained in:
Sascha Kühl 2025-05-26 15:40:40 +02:00
parent 3d667fb121
commit 5f1f3772ca
1 changed files with 3 additions and 3 deletions

View File

@ -20,10 +20,10 @@ module.exports = function(app) {
controller.findAll);
app.get(
"/api/players/:id",
[authJwt.verifyToken, authJwt.isCoachOrAdmin],
[authJwt.verifyToken],
controller.findOne);
app.get(
"/api/players/user/:userId",
[authJwt.verifyToken, authJwt.isCoachOrAdmin],
[authJwt.verifyToken],
controller.findOneByUserId);
};
};