nntrivi2001
600e8eec6a
fix(avatars): every signed-in account sees other users' pictures
...
System Health shows every user's name and avatarAt to everyone, but the
picture route GET /api/users/:id/avatar sat under the staff-only /users
prefix, so a developer got 403 EADMIN and saw only initials. authGuard now
lets any signed-in account make that one read (EVERYONE_READS); every
other /users path stays staff-only, and the test checks both.
2026-11-02 16:40:29 +07:00
..
2026-11-02 11:26:48 +07:00
2026-10-27 16:39:38 +07:00
2026-10-22 10:04:30 +07:00
2026-10-22 10:04:30 +07:00
2026-11-02 15:06:04 +07:00
2026-10-22 12:17:18 +07:00
2026-10-29 13:40:28 +07:00
2026-11-02 16:12:57 +07:00
2026-10-19 17:19:41 +07:00
2026-11-02 16:06:43 +07:00
2026-10-26 14:22:41 +07:00
2026-11-02 16:12:57 +07:00
2026-11-02 16:40:29 +07:00
2026-10-22 12:17:18 +07:00
2026-10-05 13:22:04 +07:00
2026-10-05 13:22:00 +07:00
2026-10-08 23:04:57 +07:00
2026-10-22 10:04:30 +07:00
2026-10-22 10:04:30 +07:00
2026-11-02 16:12:57 +07:00
2026-10-05 13:22:00 +07:00
2026-10-05 13:17:09 +07:00
2026-10-06 20:22:34 +07:00
2026-10-19 17:19:41 +07:00
2026-10-05 13:22:04 +07:00
2026-10-26 11:18:05 +07:00
2026-10-05 13:22:00 +07:00
2026-10-05 13:22:04 +07:00
2026-10-05 13:22:04 +07:00
2026-10-05 13:22:04 +07:00
2026-10-06 17:12:28 +07:00
2026-10-06 17:12:28 +07:00
2026-09-08 09:48:40 +07:00
2026-10-22 10:04:30 +07:00
2026-10-30 10:28:53 +07:00
2026-10-29 11:20:54 +07:00
2026-10-22 12:17:18 +07:00
2026-10-22 12:17:18 +07:00
2026-11-02 10:44:23 +07:00
2026-10-01 10:11:43 +07:00
2026-10-07 13:24:15 +07:00
2026-10-06 11:31:26 +07:00
2026-10-13 17:10:29 +07:00
2026-10-22 12:17:18 +07:00
2026-10-05 17:01:05 +07:00
2026-10-09 16:35:07 +07:00
2026-10-07 14:11:25 +07:00
2026-10-05 13:22:04 +07:00
2026-10-27 16:39:38 +07:00
2026-10-15 16:33:32 +07:00
2026-10-08 23:04:57 +07:00
2026-10-22 12:17:18 +07:00
2026-10-12 15:40:51 +07:00
2026-10-07 14:11:25 +07:00
2026-10-05 13:22:04 +07:00
2026-10-28 14:31:11 +07:00
2026-10-16 10:58:14 +07:00
2026-09-23 09:18:17 +07:00
2026-11-02 11:26:48 +07:00
2026-10-05 09:37:48 +07:00
2026-10-26 14:22:18 +07:00
2026-09-08 09:48:40 +07:00
2026-10-05 13:22:08 +07:00
2026-10-23 16:41:45 +07:00