From 05116ac35d7fbf0be2e729cfcda6701b705cf631 Mon Sep 17 00:00:00 2001
From: Salah Eddine Lalami <50052356+idurar@users.noreply.github.com>
Date: Mon, 30 Oct 2023 17:37:57 +0100
Subject: [PATCH] prevent usert from update profile

---
 .vscode/settings.json                | 3 +++
 backend/routes/coreRoutes/coreApi.js | 2 +-
 backend/setup/reset.js               | 3 +++
 3 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 .vscode/settings.json

diff --git a/.vscode/settings.json b/.vscode/settings.json
new file mode 100644
index 000000000..a70911765
--- /dev/null
+++ b/.vscode/settings.json
@@ -0,0 +1,3 @@
+{
+  "githubPullRequests.ignoredPullRequestBranches": ["master"]
+}
diff --git a/backend/routes/coreRoutes/coreApi.js b/backend/routes/coreRoutes/coreApi.js
index 1fbca52ea..2b55a75a7 100644
--- a/backend/routes/coreRoutes/coreApi.js
+++ b/backend/routes/coreRoutes/coreApi.js
@@ -65,7 +65,7 @@ router
 router
   .route('/profile/update/:id')
   .patch(
-    hasPermission('read'),
+    hasPermission(),
     adminPhotoUpload.single('file'),
     setFilePathToBody('photo'),
     catchErrors(adminController.updateProfile)
diff --git a/backend/setup/reset.js b/backend/setup/reset.js
index 7ca4aa7c1..ab06a2ea8 100644
--- a/backend/setup/reset.js
+++ b/backend/setup/reset.js
@@ -7,10 +7,13 @@ mongoose.Promise = global.Promise; // Tell Mongoose to use ES6 promises
 async function deleteData() {
   const Admin = require('../models/coreModels/Admin');
   const Setting = require('../models/coreModels/Setting');
+  const Email = require('../models/coreModels/Email');
   await Admin.remove();
   console.log('👍 admin Deleted. To setup demo admin data, run\n\n\t npm run setup\n\n');
   await Setting.remove();
   console.log('👍 Setting Deleted. To setup demo admin data, run\n\n\t npm run setup\n\n');
+  await Email.remove();
+  console.log('👍 Email Deleted. To setup demo admin data, run\n\n\t npm run setup\n\n');
   process.exit();
 }