use permission middleware

2026-01-20 11:51:22 +00:00 · 2025-04-06 03:55:31 +02:00 · 2025-04-06 03:55:31 +02:00 · 8f6555250b
commit 8f6555250b
parent 52b582e54d
2 changed files with 1 additions and 6 deletions
--- a/backend/src/middleware/permissionsMiddleware.ts
+++ b/backend/src/middleware/permissionsMiddleware.ts
@ -470,6 +470,7 @@ export default shield(
    },
    User: {
      email: or(isMyOwn, isAdmin),
+      emailNotificationSettings: isMyOwn,
    },
    Report: isModerator,
  },
--- a/backend/src/schema/resolvers/users.ts
+++ b/backend/src/schema/resolvers/users.ts
@ -382,12 +382,6 @@ export default {
      return email
    },
    emailNotificationSettings: async (parent, params, context, resolveInfo) => {
-      const { user } = context
-      if (user.id !== parent.id) {
-        // Its not the own user
-        return []
-      }
-
      return [
        {
          type: 'post',