fix: checks for user before accessing properties in preferences update operation(#3844)

This commit is contained in:
Jarrod Flesch
2023-10-24 14:46:56 -04:00
committed by GitHub
parent c8f57dd9b9
commit 24eab3af1d

View File

@@ -14,6 +14,10 @@ async function update(args: PreferenceUpdateRequest) {
value,
} = args
if (!user) {
throw new UnauthorizedError(req.t)
}
const collection = 'payload-preferences'
const filter = {
@@ -31,10 +35,6 @@ async function update(args: PreferenceUpdateRequest) {
value,
}
if (!user) {
throw new UnauthorizedError(req.t)
}
if (!overrideAccess) {
await executeAccess({ req }, defaultAccess)
}