diff --git a/server/auth.js b/server/auth.js index 4f12bbe..aabc567 100644 --- a/server/auth.js +++ b/server/auth.js @@ -100,20 +100,22 @@ module.exports = function(app, app_cfg, db, async, bcrypt, passport, io) { }; function ensureAdmin(req, res, next) { - if (req.isAuthenticated()) { - db.get('SELECT permissions FROM waip_users WHERE id = ?', req.user.id, function(err, row) { - if (row.permissions == "admin") { - // req.user is available for use here - return next(); - }; - var err = new Error('Sie verfügen nicht über die notwendigen Berechtigungen!'); - err.status = 401; - next(err); - }); - // denied. redirect to login - var err = new Error('Sie sind nicht angemeldet!'); - err.status = 401; - next(err); + if (req.isAuthenticated()) { + db.get('SELECT permissions FROM waip_users WHERE id = ?', req.user.id, function(err, row) { + if (row.permissions == "admin") { + // req.user is available for use here + return next(); + }; + var err = new Error('Sie verfügen nicht über die notwendigen Berechtigungen!'); + err.status = 401; + next(err); + }); + } else { + // denied. redirect to login + var err = new Error('Sie sind nicht angemeldet!'); + err.status = 401; + next(err); + }; }; function createUser(req, res) { @@ -152,7 +154,7 @@ module.exports = function(app, app_cfg, db, async, bcrypt, passport, io) { res.redirect('/edit_users'); } }); - } + }; }; function editUser(req, res) {