const Errors = { USER_NOT_FOUND: { notFound: 'User is not found', }, }; module.exports = { inputs: { id: { type: 'string', regex: /^[0-9]+$/, required: true, }, isAdmin: { type: 'boolean', }, name: { type: 'string', isNotEmptyString: true, }, avatar: { type: 'json', custom: (value) => _.isNull(value), }, }, exits: { notFound: { responseType: 'notFound', }, }, async fn(inputs, exits) { const { currentUser } = this.req; if (!currentUser.isAdmin) { if (inputs.id !== currentUser.id) { throw Errors.USER_NOT_FOUND; // Forbidden } delete inputs.isAdmin; } let user = await sails.helpers.getUser(inputs.id); if (!user) { throw Errors.USER_NOT_FOUND; } const values = _.pick(inputs, ['isAdmin', 'name', 'avatar']); user = await sails.helpers.updateUser(user, values, this.req); if (!user) { throw Errors.USER_NOT_FOUND; } return exits.success({ item: user, }); }, };