removed coach and admin access for player by id
This commit is contained in:
parent
3d667fb121
commit
5f1f3772ca
|
|
@ -20,10 +20,10 @@ module.exports = function(app) {
|
|||
controller.findAll);
|
||||
app.get(
|
||||
"/api/players/:id",
|
||||
[authJwt.verifyToken, authJwt.isCoachOrAdmin],
|
||||
[authJwt.verifyToken],
|
||||
controller.findOne);
|
||||
app.get(
|
||||
"/api/players/user/:userId",
|
||||
[authJwt.verifyToken, authJwt.isCoachOrAdmin],
|
||||
[authJwt.verifyToken],
|
||||
controller.findOneByUserId);
|
||||
};
|
||||
Loading…
Reference in New Issue