From a68ca45abca344167fa28a6d6efe3cf5ef70a453 Mon Sep 17 00:00:00 2001
From: Gowtham M <gowtham.m@venbainfotech.com>
Date: Wed, 8 Jul 2026 10:50:30 +0530
Subject: [PATCH] Issue fixed in change-password api

---
 app/controllers/establishment_user.controller.js | 2 +-
 app/controllers/user.controller.js               | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/controllers/establishment_user.controller.js b/app/controllers/establishment_user.controller.js
index 8faa340..8d02875 100644
--- a/app/controllers/establishment_user.controller.js
+++ b/app/controllers/establishment_user.controller.js
@@ -227,7 +227,7 @@ exports.changeUserPassword = async (req, res) => {
     }
 
     // Find user
-    const user = await EstablishmentUser.findByPk(userId);
+    const user = await EstablishmentUser.scope("withSensitive").findByPk(userId);
     if (!user) {
       return res.status(404).send({
         status: "failed",
diff --git a/app/controllers/user.controller.js b/app/controllers/user.controller.js
index d511604..66cc8b2 100644
--- a/app/controllers/user.controller.js
+++ b/app/controllers/user.controller.js
@@ -137,7 +137,7 @@ exports.changeAdminUserPassword = async (req, res) => {
     }
 
     // Find user
-    const user = await User.findByPk(userId);
+    const user = await User.scope("withSensitive").findByPk(userId);
     if (!user) {
       return res.status(404).send({ status: "failed", message: "User not found" });
     }