diff --git a/app/routes/session.js b/app/routes/session.js index 3810fb980a..7f1d3e82ba 100644 --- a/app/routes/session.js +++ b/app/routes/session.js @@ -25,6 +25,7 @@ function SessionHandler(db) { this.isAdminUserMiddleware = (req, res, next) => { if (req.session.userId) { return userDAO.getUserById(req.session.userId, (err, user) => { + if (err) return next(err); return user && user.isAdmin ? next() : res.redirect("/login"); }); }