1

tasks/tasks.routes.js

@@ -10,21 +10,21 @@ exports.route = (app) => {
   // Get all task configurations
   app.get('/api/tasks', 
     AuthTool.isValidJWT,
-    AuthTool.isPermissionLevel(SERVER), 
+    AuthTool.isPermissionLevel(USER), 
     TasksController.getAllTasks
   );
 
   // Get player tasks
   app.get('/api/tasks/:userId', 
     AuthTool.isValidJWT,
-    AuthTool.isSameUserOr(SERVER),
+    AuthTool.isPermissionLevel(USER),
     TasksController.getPlayerTasks
   );
 
   // Save player tasks
   app.post('/api/tasks/:userId', 
     AuthTool.isValidJWT,
-    AuthTool.isSameUserOr(SERVER),
+    AuthTool.isPermissionLevel(USER),
     TasksController.savePlayerTasks
   );
 };