Add client side ownership protection for profile editing
This commit is contained in:
@@ -8,14 +8,12 @@ export const users = () => {
|
||||
}
|
||||
|
||||
export const user = ({ id }) => {
|
||||
requireAuth()
|
||||
return db.user.findOne({
|
||||
where: { id },
|
||||
})
|
||||
}
|
||||
|
||||
export const userName = ({ userName }) => {
|
||||
requireAuth()
|
||||
return db.user.findOne({
|
||||
where: { userName },
|
||||
})
|
||||
|
||||
Reference in New Issue
Block a user