allow leader to get cr requests of other users

Lippesola · Jul 4, 2023 · 9f941b7 · 9f941b7
1 parent 47d9649
commit 9f941b7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/controllers/userDocument.controller.js b/src/controllers/userDocument.controller.js
@@ -21,7 +21,7 @@ export async function findOne(req, res) {
 		res.status(400).send('bad request')
 		return;
 	}
-	const year = req.query.year || (await settingModel.findByPk('currentYear')).value
+	const year = (await settingModel.findByPk('currentYear')).value
 	const isLT = req.kauth.grant.access_token.content.groups.includes(year + '_LT')
 	const isSelf = req.kauth.grant.access_token.content.sub === req.params.uuid
 	if (!isLT && !isSelf) {