Remove sensitive data

Author: Wardormeur

lib/controllers/users/load.js

@@ -0,0 +1,19 @@
+/**
+ * This is the act you should call when the result is exposed to the front-end
+ */
+
+var _ = require('lodash');
+/**
+ * Load a sys_user without any sensitive data
+ * @param  {String}   id  user Id
+ */
+function cmd_load (args, done) {
+  var seneca = this;
+  var ENTITY_NS = 'sys/user';
+  var sensitiveData = ['lmsId', 'pass', 'salt'];
+  seneca.make(ENTITY_NS).load$(args.id, function (err, user) {
+    return done(err, _.omit(user, sensitiveData));
+  });
+}
+
+module.exports = cmd_load;

lib/profiles/user-profile-data.js

@@ -170,7 +170,7 @@ function cmd_user_profile_data (args, done) {
   }
 
   function getUser (profile, done) {
-    seneca.act({role: 'cd-users', cmd: 'load', id: query.userId, user: args.user}, function (err, user) {
+    seneca.act({role: 'cd-users', ctrl: 'user', cmd: 'load', id: query.userId}, function (err, user) {
       if (err) return done(err);
       profile.user = user;
       return done(null, profile);

users.js

@@ -37,6 +37,7 @@ module.exports = function (options) {
   seneca.add({role: plugin, cmd: 'kpi_number_of_youth_females_registered'}, cmd_kpi_number_of_youth_females_registered);
   seneca.add({role: plugin, cmd: 'is_self'}, require('./lib/users/is-self'));
   seneca.add({role: plugin, cmd: 'is_parent_of'}, require('./lib/users/is-parent-of'));
+  seneca.add({role: plugin, ctrl: 'user', cmd: 'load'}, require('./lib/controllers/users/load'));
   //  LMS Integration
   seneca.add({role: plugin, cmd: 'get_lms_link'}, require('./lib/users/lms/get-lms-link'));
   seneca.add({role: plugin, cmd: 'update_lms_user'}, require('./lib/users/lms/update-user'));