UniqAI/hexabot
1
0
Fork 0
mirror of https://github.com/hexastack/hexabot synced 2025-06-26 18:27:28 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: allow users to update own profile and access own avatar

Browse Source
This commit is contained in:
Mohamed Marrouchi 2025-01-06 18:52:55 +01:00
parent 586337496f
commit 57fcd9b3a3
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/src/user/guards/ability.guard.ts
View File

@ -60,6 +60,8 @@ export class Ability implements CanActivate {
'/auth/me', '/auth/me',
'/channel', '/channel',
'/i18n', '/i18n',
// Allow to update own profile
`/user/edit/${user.id}`,
// Allow access to own avatar // Allow access to own avatar
`/user/${user.id}/profile_pic`, `/user/${user.id}/profile_pic`,
].includes(_parsedUrl.pathname) ].includes(_parsedUrl.pathname)