const Errors = { USER_NOT_FOUND: { userNotFound: 'User not found', }, }; module.exports = { inputs: { id: { type: 'string', regex: /^[0-9]+$/, required: true, }, isAdmin: { type: 'boolean', }, name: { type: 'string', isNotEmptyString: true, }, avatar: { type: 'json', custom: (value) => _.isNull(value), }, phone: { type: 'string', isNotEmptyString: true, allowNull: true, }, organization: { type: 'string', isNotEmptyString: true, allowNull: true, }, subscribeToOwnCards: { type: 'boolean', }, }, exits: { userNotFound: { responseType: 'notFound', }, }, async fn(inputs, exits) { const { currentUser } = this.req; if (!currentUser.isAdmin) { if (inputs.id !== currentUser.id) { throw Errors.USER_NOT_FOUND; // Forbidden } delete inputs.isAdmin; // eslint-disable-line no-param-reassign } let user = await sails.helpers.getUser(inputs.id); if (!user) { throw Errors.USER_NOT_FOUND; } const values = _.pick(inputs, [ 'isAdmin', 'name', 'avatar', 'phone', 'organization', 'subscribeToOwnCards', ]); user = await sails.helpers.updateUser(user, values, this.req); if (!user) { throw Errors.USER_NOT_FOUND; } return exits.success({ item: user, }); }, };