krikkert/habitica
1
0
Fork 0
mirror of https://github.com/HabitRPG/habitica.git synced 2025-12-19 15:48:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

filter out bank challenge if is not userSupport

Browse Source
This commit is contained in:
negue
2022-07-13 00:54:14 +02:00
committed by SabreCat
parent e0dc608fd8
commit 2b4ffdf27f
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
website/server/controllers/api-v4/members.js
View File

@@ -64,9 +64,15 @@ api.purchaseHistory = {
req.checkParams('memberId', res.t('memberIdRequired')).notEmpty().isUUID();
const validationErrors = req.validationErrors();
if (validationErrors) throw validationErrors;
const transactions = await Transaction
let transactions = await Transaction
.find({ userId: req.params.memberId })
.sort({ createdAt: -1 });
.sort({ createdAt: -1 })
.exec();
if (!res.locals.user.hasPermission('userSupport')) {
transactions = transactions.filter(t => t.transactionType !== 'create_bank_challenge');
}
res.respond(200, transactions);
},
};