Merge pull request #302 from bettersg/feat/checkers-admin-status-can-…

…be-updated prevent API from updating isAdmin or tier
bettersg · May 4, 2024 · b51f737 · b51f737
2 parents 4f80e77 + 47a36ee
commit b51f737
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/functions/src/definitions/api/handlers/patchChecker.ts b/functions/src/definitions/api/handlers/patchChecker.ts
@@ -42,6 +42,14 @@ const patchCheckerHandler = async (req: Request, res: Response) => {
       return res.status(400).send("telegramId cannot be updated")
     }
 
+    if (keys.includes("isAdmin")) {
+      return res.status(400).send("isAdmin cannot be updated")
+    }
+
+    if (keys.includes("tier")) {
+      return res.status(400).send("tier cannot be updated")
+    }
+
     //update checker
     await checkerRef.update(body)