removed coach and admin access for player by id

This commit is contained in:
Sascha Kühl 2025-05-26 15:40:40 +02:00
parent 3d667fb121
commit 5f1f3772ca
1 changed files with 3 additions and 3 deletions

View File

@ -20,10 +20,10 @@ module.exports = function(app) {
controller.findAll); controller.findAll);
app.get( app.get(
"/api/players/:id", "/api/players/:id",
[authJwt.verifyToken, authJwt.isCoachOrAdmin], [authJwt.verifyToken],
controller.findOne); controller.findOne);
app.get( app.get(
"/api/players/user/:userId", "/api/players/user/:userId",
[authJwt.verifyToken, authJwt.isCoachOrAdmin], [authJwt.verifyToken],
controller.findOneByUserId); controller.findOneByUserId);
}; };