Dicken/dickendock
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix: Gebietseroberung - Admin sieht alle Nutzer

Browse Source
This commit is contained in:
Dicken
2026-06-25 23:30:19 +02:00
parent 7e19b2fe7f
commit 4c349e00d3
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
backend/src/tools/gebietseroberung/routes.js
View File

@@ -97,7 +97,10 @@ router.get('/', authenticate, (req, res) => {
// ── Alle User (für Einladen) ────────────────────────────────────────────────── // ── Alle User (für Einladen) ──────────────────────────────────────────────────
router.get('/users', authenticate, (req, res) => { router.get('/users', authenticate, (req, res) => {
const me = uid(req); const me = uid(req);
const users = db.prepare('SELECT id, username FROM users WHERE id != ? AND hidden != 1 ORDER BY username').all(me); const isAdmin = req.user?.role === 'admin';
const users = isAdmin
? db.prepare('SELECT id, username FROM users WHERE id != ? ORDER BY username').all(me)
: db.prepare('SELECT id, username FROM users WHERE id != ? AND hidden != 1 ORDER BY username').all(me);
res.json(users); res.json(users);
}); });