From 9f941b74e505448f35385c1b62d6d5cd3f9c6c7a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=20Preu=C3=9Fer?= <mail@mpreusser.de>
Date: Tue, 4 Jul 2023 21:57:01 +0200
Subject: [PATCH] allow leader to get cr requests of other users

---
 src/controllers/userDocument.controller.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/controllers/userDocument.controller.js b/src/controllers/userDocument.controller.js
index 0615042..1f861de 100644
--- a/src/controllers/userDocument.controller.js
+++ b/src/controllers/userDocument.controller.js
@@ -21,7 +21,7 @@ export async function findOne(req, res) {
 		res.status(400).send('bad request')
 		return;
 	}
-	const year = req.query.year || (await settingModel.findByPk('currentYear')).value
+	const year = (await settingModel.findByPk('currentYear')).value
 	const isLT = req.kauth.grant.access_token.content.groups.includes(year + '_LT')
 	const isSelf = req.kauth.grant.access_token.content.sub === req.params.uuid
 	if (!isLT && !isSelf) {