Non-Admins can replace users on cht-core >4.4 (#77)

1.1.7
medic · Mar 20, 2024 · 9ad5dbf · 9ad5dbf
1 parent b110678
commit 9ad5dbf
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 4 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "cht-user-management",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "main": "dist/index.js",
   "dependencies": {
     "@fastify/autoload": "^5.8.0",

diff --git a/src/lib/cht-api.ts b/src/lib/cht-api.ts
@@ -211,10 +211,16 @@ export class ChtApi {
   };
 
   private async getUsersAtPlace(placeId: string): Promise<string[]> {
-    const url = `${this.protocolAndHost}/_users/_find`;
+    // #76 mm-online users cant query _users db after core4.4
+    const url = `${this.protocolAndHost}/medic/_find`;
     const payload = {
       selector: {
+        type: 'user-settings',
         facility_id: placeId,
+        $or: [
+          { inactive: false },
+          { inactive: { $exists: false } }
+        ]
       },
     };