IT4Change/gradido
3
0
Fork 0
mirror of https://github.com/IT4Change/gradido.git synced 2025-12-13 07:45:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix updatePendingCreation method logic, now it checks if the updated datas are allowed so that no user can get more than 1000 GDD per month.

Browse Source
This commit is contained in:
elweyn 2022-01-26 15:54:19 +01:00
parent c595c47d90
commit 190038eaa1
1 changed files with 24 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
backend/src/graphql/resolver/AdminResolver.ts
View File

@ -113,25 +113,35 @@ export class AdminResolver {
const user = await userRepository.findByEmail(email) const user = await userRepository.findByEmail(email)
const loginPendingTasksAdminRepository = getCustomRepository(LoginPendingTasksAdminRepository) const loginPendingTasksAdminRepository = getCustomRepository(LoginPendingTasksAdminRepository)
const updatedCreation = await loginPendingTasksAdminRepository.findOneOrFail({ id }) const pendingCreationToUpdate = await loginPendingTasksAdminRepository.findOneOrFail({ id })
if (updatedCreation.userId !== user.id) if (pendingCreationToUpdate.userId !== user.id) {
throw new Error('user of the pending creation and send user does not correspond') throw new Error('user of the pending creation and send user does not correspond')
}
updatedCreation.amount = BigInt(amount * 10000) const creationDateObj = new Date(creationDate)
updatedCreation.memo = memo const creations = await getUserCreations(user.id)
updatedCreation.date = new Date(creationDate)
updatedCreation.moderator = moderator
await loginPendingTasksAdminRepository.save(updatedCreation) if (isCreationValid(creations, amount, creationDateObj)) {
const result = new UpdatePendingCreation() // TODO Check if open creation (of creationDate) + amount * 10000 <= 1000
result.amount = parseInt(amount.toString())
result.memo = updatedCreation.memo
result.date = updatedCreation.date
result.moderator = updatedCreation.moderator
result.creation = await getUserCreations(user.id)
return result pendingCreationToUpdate.amount = BigInt(amount * 10000)
pendingCreationToUpdate.memo = memo
pendingCreationToUpdate.date = new Date(creationDate)
pendingCreationToUpdate.moderator = moderator
await loginPendingTasksAdminRepository.save(pendingCreationToUpdate)
const result = new UpdatePendingCreation()
result.amount = parseInt(amount.toString())
result.memo = pendingCreationToUpdate.memo
result.date = pendingCreationToUpdate.date
result.moderator = pendingCreationToUpdate.moderator
result.creation = await getUserCreations(user.id)
return result
} else {
throw new Error('Creation is not valid')
}
} }
@Authorized([RIGHTS.SEARCH_PENDING_CREATION]) @Authorized([RIGHTS.SEARCH_PENDING_CREATION])