removed coach and admin access for player by id
This commit is contained in:
parent
3d667fb121
commit
5f1f3772ca
|
|
@ -20,10 +20,10 @@ module.exports = function(app) {
|
||||||
controller.findAll);
|
controller.findAll);
|
||||||
app.get(
|
app.get(
|
||||||
"/api/players/:id",
|
"/api/players/:id",
|
||||||
[authJwt.verifyToken, authJwt.isCoachOrAdmin],
|
[authJwt.verifyToken],
|
||||||
controller.findOne);
|
controller.findOne);
|
||||||
app.get(
|
app.get(
|
||||||
"/api/players/user/:userId",
|
"/api/players/user/:userId",
|
||||||
[authJwt.verifyToken, authJwt.isCoachOrAdmin],
|
[authJwt.verifyToken],
|
||||||
controller.findOneByUserId);
|
controller.findOneByUserId);
|
||||||
};
|
};
|
||||||
Loading…
Reference in New Issue