Remove check from route since part of middleware now.

Author: lostlevels

auth/service/api/v1/profile.go

@@ -28,21 +28,8 @@ func (r *Router) ProfileRoutes() []*rest.Route {
 func (r *Router) GetProfile(res rest.ResponseWriter, req *rest.Request) {
 	responder := request.MustNewResponder(res, req)
 	ctx := req.Context()
-	details := request.GetAuthDetails(ctx)
 	userID := req.PathParam("userId")
 
-	if details.IsUser() {
-		hasPerms, err := r.PermissionsClient().HasMembershipRelationship(ctx, details.UserID(), userID)
-		if err != nil {
-			responder.InternalServerError(err)
-			return
-		}
-		if !hasPerms {
-			responder.Empty(http.StatusForbidden)
-			return
-		}
-	}
-
 	user, err := r.UserAccessor().FindUserById(ctx, userID)
 	if err != nil {
 		responder.Error(http.StatusBadRequest, err)
@@ -59,21 +46,8 @@ func (r *Router) GetProfile(res rest.ResponseWriter, req *rest.Request) {
 func (r *Router) GetLegacyProfile(res rest.ResponseWriter, req *rest.Request) {
 	responder := request.MustNewResponder(res, req)
 	ctx := req.Context()
-	details := request.GetAuthDetails(ctx)
 	userID := req.PathParam("userId")
 
-	if details.IsUser() {
-		hasPerms, err := r.PermissionsClient().HasMembershipRelationship(ctx, details.UserID(), userID)
-		if err != nil {
-			responder.InternalServerError(err)
-			return
-		}
-		if !hasPerms {
-			responder.Empty(http.StatusForbidden)
-			return
-		}
-	}
-
 	user, err := r.UserAccessor().FindUserById(ctx, userID)
 	if err != nil {
 		responder.Error(http.StatusBadRequest, err)