adapt-authoring-api 1.2.0 → 1.3.0

package/lib/AbstractApiModule.js

@@ -514,13 +514,15 @@ class AbstractApiModule extends AbstractModule {
    * @return {Promise} Rejects if access should be blocked
    */
   async checkAccess (req, data) {
+    if (req.auth.isSuper) {
+      return data
+    }
     const isArray = Array.isArray(data)
     const filtered = []
     let error
     await Promise.allSettled((isArray ? data : [data]).map(async r => {
       try {
-        if (!this.accessCheckHook.hasObservers || req.auth.isSuper ||
-          (await this.accessCheckHook.invoke(req, r)).some(Boolean)) {
+        if (!this.accessCheckHook.hasObservers || (await this.accessCheckHook.invoke(req, r)).some(Boolean)) {
           filtered.push(r)
         }
       } catch (e) {
@@ -573,11 +575,14 @@ class AbstractApiModule extends AbstractModule {
    * @param {external:MongoDBFindOptions} mongoOptions Options to be passed to the MongoDB function
    * @return {Promise} Resolves with the single DB document
    */
-  async findOne (query, options, mongoOptions) {
+  async findOne (query, options = {}, mongoOptions = {}) {
     const results = await this.find(query, options, mongoOptions)
     if (results.length > 1) {
       throw this.app.errors.TOO_MANY_RESULTS.setData({ actual: results.length, expected: 1, query })
     }
+    if (options.strict !== false && !results.length) {
+      throw this.app.errors.NOT_FOUND.setData({ id: query, type: options.schemaName })
+    }
     return results[0]
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "adapt-authoring-api",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Abstract module for creating APIs",
   "homepage": "https://github.com/adapt-security/adapt-authoring-api",
   "license": "GPL-3.0",