Remove auth permission to view notification

cisagov · Apr 9, 2024 · 26667be · 26667be
1 parent 6c3c5ad
commit 26667be
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/backend/src/api/app.ts b/backend/src/api/app.ts
@@ -451,7 +451,7 @@ authenticatedRoute.put(
   handlerToExpress(users.registrationDenial)
 );
 
-authenticatedRoute.get(
+app.get(
   '/notifications',
   handlerToExpress(notifications.list)
 )

diff --git a/backend/src/api/notifications.ts b/backend/src/api/notifications.ts
@@ -105,13 +105,13 @@ export const del = wrapHandler(async (event) => {
 export const list = wrapHandler(async (event) => {
     console.log('list function called with event: ', event);
 
-    if (!isGlobalWriteAdmin(event)) {
-      return {
-        //TODO: Should we return a 403?
-        statusCode: 200,
-        body: JSON.stringify([])
-      };
-    }
+    // if (!isGlobalWriteAdmin(event)) {
+    //   return {
+    //     //TODO: Should we return a 403?
+    //     statusCode: 200,
+    //     body: JSON.stringify([])
+    //   };
+    // }
     await connectToDatabase();
     console.log('Database connected');