diff --git a/app/controllers/establishment.controller.js b/app/controllers/establishment.controller.js index ff01ce1..5813768 100644 --- a/app/controllers/establishment.controller.js +++ b/app/controllers/establishment.controller.js @@ -585,6 +585,20 @@ exports.updateEstablishment = async (req, res) => { try { const { id } = req.params; const { establishment_products, establishment_user, ...estData } = req.body; + const user = await EstablishmentUser.findOne({where:{establishment_id:id}}); + console.log("Establishment User email: ",user.email) + if (user?.email === 'bhavinkumar.chandulal@fcsc.gov.ae') { + return res.status(403).json({ + status: "error", + message: "You cannot modify Super Admin data." + }); + } + const resolveActionDoneBy = (item) => { + if (item?.action_done_by) return item.action_done_by; + + if (req.user.role === "Admin") return "admin_users"; + return "establishment_users"; + }; const establishment = await Establishment.findByPk(id); if (!establishment) { @@ -600,12 +614,7 @@ exports.updateEstablishment = async (req, res) => { return res.status(400).json({ status:"failed", message:"establishment_code already exists" }); } } - const resolveActionDoneBy = (item) => { - if (item?.action_done_by) return item.action_done_by; - - if (req.user.role === "Admin") return "admin_users"; - return "establishment_users"; - }; + estData.updated_by = estData.updated_by || req.user.id; estData.updated_at = estData.updated_at || new Date(); // update establishment @@ -632,7 +641,6 @@ exports.updateEstablishment = async (req, res) => { // update user if needed if (establishment_user) { - const user = await EstablishmentUser.findOne({where:{establishment_id:id}}); if (user) { let updateUser = { name: establishment_user.name,