Implement user role-based filtering for fetching blogs

Abdulazizcoderdim · Abdulazizcoderdim · commit 20de7d4220aa · 2025-08-04T20:26:22.000+05:00
diff --git a/src/controllers/v1/blog/get_all_blogs.ts b/src/controllers/v1/blog/get_all_blogs.ts
@@ -1,19 +1,34 @@
 import config from "@/config";
 import { logger } from "@/lib/winston";
 import Blog from "@/models/blog";
+import User from "@/models/user";
 import type { Request, Response } from "express";
 
+interface QueryType {
+  status?: "draft" | "published";
+}
+
 const getAllBlogs = async (req: Request, res: Response): Promise<void> => {
   try {
+    const userId = req.userId;
     const limit = parseInt(req.query.limit as string) || config.defaultResLimit;
     const offset =
       parseInt(req.query.offset as string) || config.defaultResOffset;
     const total = await Blog.countDocuments();
 
-    const blogs = await Blog.find()
-      .select("-__v")
+    const user = await User.findById(userId).select("role").lean().exec();
+    const query: QueryType = {};
+
+    if (user?.role === "user") {
+      query.status = "published";
+    }
+
+    const blogs = await Blog.find(query)
+      .select("-banner.publicId -__v")
+      .populate("author", "-createdAt -updatedAt -__v")
       .limit(limit)
       .skip(offset)
+      .sort({ createdAt: -1 })
       .lean()
       .exec();
 
@@ -30,7 +45,7 @@ const getAllBlogs = async (req: Request, res: Response): Promise<void> => {
       error,
     });
 
-    logger.error("Error while getting all users", error);
+    logger.error("Error while fetching blogs", error);
   }
 };
 
diff --git a/src/routes/v1/blog.ts b/src/routes/v1/blog.ts
@@ -1,4 +1,5 @@
 import createBlog from "@/controllers/v1/blog/create_blog";
+import getAllBlogs from "@/controllers/v1/blog/get_all_blogs";
 import authorize from "@/lib/authorize";
 import authenticate from "@/middleware/authenticate";
 import uploadBlogBanner from "@/middleware/uploadBlogBanner";

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,5 @@`
`1`	`1`	`import createBlog from "@/controllers/v1/blog/create_blog";`
	`2`	`+import getAllBlogs from "@/controllers/v1/blog/get_all_blogs";`
`2`	`3`	`import authorize from "@/lib/authorize";`
`3`	`4`	`import authenticate from "@/middleware/authenticate";`
`4`	`5`	`import uploadBlogBanner from "@/middleware/uploadBlogBanner";`