From 60c94c6763b157db3c16c3506353e1116840741d Mon Sep 17 00:00:00 2001
From: tinykav <kaveeshatiny@gmail.com>
Date: Wed, 24 Sep 2025 02:55:58 +0530
Subject: [PATCH] updated auth.js

---
 middleware/auth.js | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/middleware/auth.js b/middleware/auth.js
index f0e240b..ea07263 100644
--- a/middleware/auth.js
+++ b/middleware/auth.js
@@ -268,11 +268,12 @@ const checkResourceAccess = async (resourceType, resourceId, userId) => {
  */
 const checkEventAccess = async (eventId, userId) => {
   try {
-    return true; // mock: allow all for demo
+    // Mock: allow all for demo
+    return true;
   } catch (error) {
     console.error(`[SECURITY] Event access check error: ${error.message}`);
-    return false;
   }
+  return false; // <-- moved outside so it's always reachable
 };
 
 module.exports = {