prevent demo account change

idurar · Oct 2, 2024 · 36b1d5e · 36b1d5e
1 parent 1d98406
commit 36b1d5e
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 0 deletions.
diff --git a/backend/src/controllers/middlewaresControllers/createUserController/updatePassword.js b/backend/src/controllers/middlewaresControllers/createUserController/updatePassword.js
@@ -17,6 +17,14 @@ const updatePassword = async (userModel, req, res) => {
 
   // Find document by id and updates with the required fields
 
+  if (userProfile.email === 'admin@demo.com') {
+    return res.status(403).json({
+      success: false,
+      result: null,
+      message: "you couldn't update demo password",
+    });
+  }
+
   const salt = uniqueId();
 
   const passwordHash = bcrypt.hashSync(salt + password);

diff --git a/backend/src/controllers/middlewaresControllers/createUserController/updateProfile.js b/backend/src/controllers/middlewaresControllers/createUserController/updateProfile.js
@@ -5,6 +5,15 @@ const updateProfile = async (userModel, req, res) => {
 
   const reqUserName = userModel.toLowerCase();
   const userProfile = req[reqUserName];
+
+  if (userProfile.email === 'admin@demo.com') {
+    return res.status(403).json({
+      success: false,
+      result: null,
+      message: "you couldn't update demo informations",
+    });
+  }
+
   let updates = req.body.photo
     ? {
         email: req.body.email,

diff --git a/backend/src/controllers/middlewaresControllers/createUserController/updateProfilePassword.js b/backend/src/controllers/middlewaresControllers/createUserController/updateProfilePassword.js
@@ -32,6 +32,13 @@ const updateProfilePassword = async (userModel, req, res) => {
     salt: salt,
   };
 
+  if (userProfile.email === 'admin@demo.com') {
+    return res.status(403).json({
+      success: false,
+      result: null,
+      message: "you couldn't update demo password",
+    });
+  }
   const resultPassword = await UserPassword.findOneAndUpdate(
     { user: userProfile._id, removed: false },
     { $set: UserPasswordData },