Checking ID in a proper method.

elszczepano · Dec 30, 2018 · d68b39f · d68b39f
1 parent 35f5389
commit d68b39f
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/src/middlewares/checkOwnership.js b/src/middlewares/checkOwnership.js
@@ -1,7 +1,5 @@
 export default (req, res, next) => {
-    const { _id } = req.user;
-    const { id } = req.params;
-    if(_id == id) next();
+    if(req.user._id.equals(req.params.id)) next();
     else res.status(403).json({
         success: false,
         message: 'Access denied. User not permitted.'