fix: Only prevent fulfilled or pending order users from deletion (#5432)

fossasia · Oct 30, 2020 · af11e15 · af11e15 · vercel · Oct 30, 2020
1 parent aecfed4
commit af11e15
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/app/routes/account/danger-zone.js b/app/routes/account/danger-zone.js
@@ -9,10 +9,18 @@ export default class DangerZoneRoute extends Route.extend(AuthenticatedRouteMixi
   }
 
   async model() {
-
     const user = this.authManager.currentUser;
+
+    const filter = [{
+      or: ['completed', 'placed', 'pending', 'initializing'].map(val => ({
+        name : 'status',
+        op   : 'eq',
+        val
+      }))
+    }];
+
     const events = await user.query('events', {});
-    const orders = await user.query('orders', {});
+    const orders = await user.query('orders', { filter });
 
     return {
       user,