add user read permission to clients
This commit is contained in:
@@ -125,7 +125,7 @@ export async function listUsers(user: AuthenticatedUser) {
|
||||
return await userModel
|
||||
.find({
|
||||
$and: [
|
||||
{ tenantId: user.tenantId, orgId: user.orgId },
|
||||
{ tenantId: user.tenantId, orgId: user.orgId, role: "client" },
|
||||
{ dev: { $ne: true } },
|
||||
],
|
||||
})
|
||||
|
||||
@@ -116,6 +116,7 @@ export const rules: Record<
|
||||
},
|
||||
client: {
|
||||
claims: [
|
||||
"user:read",
|
||||
"permit:read",
|
||||
"permit:write",
|
||||
"file:upload",
|
||||
|
||||
Reference in New Issue
Block a user