From 4c349e00d33009cd5b1840d5d06c032692c4e0a0 Mon Sep 17 00:00:00 2001 From: Dicken Date: Thu, 25 Jun 2026 23:30:19 +0200 Subject: [PATCH] fix: Gebietseroberung - Admin sieht alle Nutzer --- backend/src/tools/gebietseroberung/routes.js | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/backend/src/tools/gebietseroberung/routes.js b/backend/src/tools/gebietseroberung/routes.js index 68cd406..d572ba0 100644 --- a/backend/src/tools/gebietseroberung/routes.js +++ b/backend/src/tools/gebietseroberung/routes.js @@ -97,7 +97,10 @@ router.get('/', authenticate, (req, res) => { // ── Alle User (für Einladen) ────────────────────────────────────────────────── router.get('/users', authenticate, (req, res) => { const me = uid(req); - const users = db.prepare('SELECT id, username FROM users WHERE id != ? AND hidden != 1 ORDER BY username').all(me); + const isAdmin = req.user?.role === 'admin'; + const users = isAdmin + ? db.prepare('SELECT id, username FROM users WHERE id != ? ORDER BY username').all(me) + : db.prepare('SELECT id, username FROM users WHERE id != ? AND hidden != 1 ORDER BY username').all(me); res.json(users); });