From ba3cfa8e0405083834d07eca0878ca62f620eaa1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Wolfgang=20Hu=C3=9F?= <wolle.huss@pjannto.com>
Date: Fri, 14 Feb 2020 16:52:51 +0100
Subject: [PATCH] Set sensible report properties to moderators only in the
 permissionsMiddleware

---
 backend/src/middleware/permissionsMiddleware.js | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/backend/src/middleware/permissionsMiddleware.js b/backend/src/middleware/permissionsMiddleware.js
index 755ddabf8..107a45a35 100644
--- a/backend/src/middleware/permissionsMiddleware.js
+++ b/backend/src/middleware/permissionsMiddleware.js
@@ -152,6 +152,15 @@ export default shield(
     User: {
       email: or(isMyOwn, isAdmin),
     },
+    Report: {
+      createdAt: or(isModerator),
+      updatedAt: or(isModerator),
+      rule: or(isModerator),
+      disable: or(isModerator),
+      closed: or(isModerator),
+      filed: or(isModerator),
+      reviewed: or(isModerator),
+    },
   },
   {
     debug,