Filter iamGroups in all-access

UniversityOfHelsinkiCS · Jan 23, 2023 · 080b7d0 · 080b7d0
1 parent 6ff4d7b
commit 080b7d0
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/src/index.js b/src/index.js
@@ -62,10 +62,15 @@ app.get('/organisation-data', (_req, res) => res.send(data))
 app.get('/all-access', async (_req, res) => {
   const users = await User.findAll()
 
-  const usersWithAccess = users.map(({ dataValues: user }) => ({
-    ...user,
-    ...getIAMRights(user.iamGroups),
-  }))
+  const usersWithAccess = users.map(({ dataValues: user }) => {
+    const iamGroups = user.iamGroups.filter((iam) => relevantIAMs.includes(iam))
+
+    return {
+      ...user,
+      iamGroups,
+      ...getIAMRights(iamGroups),
+    }
+  })
 
   return res.send(usersWithAccess)
 })