search

thomas4019 / expressa

API creation middleware with an admin interface
MIT License
439 stars 27 forks source link

Admin - Cant Update User #150

Closed kane-mason closed 3 years ago

kane-mason commented 3 years ago

Since update of ajv i am unable to make updates to the user from the admin panel, as am confronted with the following error:

image

I also noticed that after i perform a post request, the users password (as hashed salt) is on the json returned to the client. Not sure if this happened before but it definitely doesnt happen on a get

kane-mason commented 3 years ago

Seems i had lost my users: view hashed passwords": 1 permission from my admin role. Adding this back solves the problem

kane-mason commented 3 years ago

Sorry reopening for feedback on my second point, if the user does not have the view hashed passwords permission, surely it shouldnt be returned on a post or put ?

maybe a changed listener for loginCollections