Initial commit
This commit is contained in:
83
src/routes/api/admin/accs.ts
Normal file
83
src/routes/api/admin/accs.ts
Normal file
@@ -0,0 +1,83 @@
|
||||
import User from "@schemas/User";
|
||||
import { Router } from "express"
|
||||
import { Perms, adminCond, adminPerm } from "@/utility";
|
||||
|
||||
const accsRouter = Router()
|
||||
|
||||
accsRouter.use(adminPerm(Perms.Accs))
|
||||
|
||||
accsRouter.get('/', async (req, res)=> {
|
||||
if (req.user.admin) {
|
||||
res.send(await User.find({"uname": {"$ne": req.user.uname}}, {pass: 0}))
|
||||
return
|
||||
}
|
||||
res.send(await User.find({"uname": {"$ne": req.user.uname}}, {pass: 0, admin: 0}))
|
||||
})
|
||||
|
||||
accsRouter.post('/', async (req, res)=> {
|
||||
if (req.body.uname == "admin") return res.status(400).send("This name is reserved").end()
|
||||
if (req.body.flags) {
|
||||
if (adminCond(req.user.admin, Perms.Superadmin)) {
|
||||
if (adminCond(req.body.flags, Perms.Superadmin)) {
|
||||
res.status(400).send("Cannot set superadmin")
|
||||
} else {
|
||||
await User.create({uname: req.body.uname, room: req.body.room, admin: req.body.flags, fname: req.body.fname, surname: req.body.surname})
|
||||
res.status(201).send({status: 201})
|
||||
}
|
||||
}
|
||||
} else {
|
||||
await User.create({uname: req.body.uname, room: req.body.room, fname: req.body.fname, surname: req.body.surname})
|
||||
res.status(201).send({status: 201})
|
||||
}
|
||||
})
|
||||
|
||||
accsRouter.put('/:id', async (req, res)=> {
|
||||
let user = await User.findById(req.params.id)
|
||||
if (!user) {
|
||||
res.status(404).send("User not found")
|
||||
return
|
||||
}
|
||||
if (req.body.flags != undefined) {
|
||||
if (adminCond(req.user.admin, Perms.Superadmin)) {
|
||||
if (adminCond(user.admin, Perms.Superadmin)) {
|
||||
res.status(400).send("Cannot edit other superadmins")
|
||||
} else {
|
||||
if (adminCond(req.body.flags, Perms.Superadmin)) {
|
||||
res.status(400).send("Cannot set superadmin")
|
||||
} else {
|
||||
await user.set({uname: req.body.uname, room: req.body.room, admin: req.body.flags, fname: req.body.fname, surname: req.body.surname}).save()
|
||||
res.send({status: 200})
|
||||
}
|
||||
}
|
||||
} else {
|
||||
res.sendStatus(403)
|
||||
}
|
||||
} else {
|
||||
await user.set(req.body).save()
|
||||
res.send({status: 200})
|
||||
}
|
||||
})
|
||||
|
||||
accsRouter.patch('/:id/reset', async (req, res) => {
|
||||
let user = await User.findById(req.params.id)
|
||||
if (!user) {
|
||||
res.status(404).send("User not found")
|
||||
return
|
||||
}
|
||||
if (await user.set({pass: "$2y$10$miwF6PrsbLpRzFsj8XKjY.0flJWzWDQJ7iT81HuX1ic/1s0mfmvk."}).save()) { // Pass: reset
|
||||
res.send({status: 200}).end()
|
||||
return
|
||||
} else {
|
||||
res.sendStatus(500)
|
||||
}
|
||||
})
|
||||
|
||||
accsRouter.delete('/:id', async (req, res) => {
|
||||
if (await User.findByIdAndDelete(req.params.id)) {
|
||||
res.send({status: 200}).end()
|
||||
} else {
|
||||
res.sendStatus(404)
|
||||
}
|
||||
})
|
||||
|
||||
export {accsRouter};
|
||||
71
src/routes/api/admin/clean.ts
Normal file
71
src/routes/api/admin/clean.ts
Normal file
@@ -0,0 +1,71 @@
|
||||
import { Router } from "express";
|
||||
import { Perms, adminPerm } from "@/utility";
|
||||
import capability, { Features } from "@/capability";
|
||||
import usettings from "@/usettings";
|
||||
import Grade from "@schemas/Grade";
|
||||
|
||||
const cleanRouter = Router()
|
||||
cleanRouter.use(adminPerm(Perms.Clean))
|
||||
cleanRouter.use(capability.mw(Features.Clean))
|
||||
|
||||
cleanRouter.get("/:date/:room", async (req, res) => {
|
||||
res.send(await Grade.findOne({
|
||||
date: new Date(req.params.date),
|
||||
room: req.params.room
|
||||
}))
|
||||
})
|
||||
|
||||
cleanRouter.post("/", async (req, res) => {
|
||||
let obj = {
|
||||
...req.body,
|
||||
date: new Date(req.body.date),
|
||||
gradeDate: new Date(),
|
||||
}
|
||||
await Grade.findOneAndReplace({
|
||||
date: new Date(req.body.date),
|
||||
room: req.body.room,
|
||||
}, obj, {upsert: true})
|
||||
res.send({status: 200})
|
||||
})
|
||||
|
||||
cleanRouter.get("/summary/:start/:stop", async (req, res) => {
|
||||
var data = await Grade.find({
|
||||
date: {
|
||||
$gte: new Date(req.params.start),
|
||||
$lte: new Date(req.params.stop)
|
||||
}
|
||||
})
|
||||
data = data.map(v => v.toJSON())
|
||||
var byRoom: {[room: number]: any[]} = {}
|
||||
data.forEach((v) => {
|
||||
let roomarray = byRoom[v.room] ? byRoom[v.room] : [];
|
||||
byRoom[v.room] = [...roomarray, {...v, room: undefined}]
|
||||
})
|
||||
var stat: {room: number, avg: number}[] = []
|
||||
for (let i in byRoom) {
|
||||
var sum: number = 0
|
||||
for (let j of byRoom[i]) {
|
||||
sum += j.grade
|
||||
}
|
||||
let avrg = sum/byRoom[i].length
|
||||
stat.push({room: Number.parseInt(i), avg: avrg})
|
||||
}
|
||||
res.send(stat)
|
||||
})
|
||||
|
||||
cleanRouter.delete("/:id", async (req, res) => {
|
||||
if (await Grade.findByIdAndDelete(req.params.id)) {
|
||||
res.send({status: 200})
|
||||
} else {
|
||||
res.sendStatus(500)
|
||||
}
|
||||
})
|
||||
|
||||
cleanRouter.get('/config', (req, res) => {
|
||||
res.send({
|
||||
rooms: usettings.settings.rooms,
|
||||
things: usettings.settings.cleanThings
|
||||
})
|
||||
})
|
||||
|
||||
export {cleanRouter}
|
||||
16
src/routes/api/admin/editor/index.ts
Normal file
16
src/routes/api/admin/editor/index.ts
Normal file
@@ -0,0 +1,16 @@
|
||||
import { Router } from "express";
|
||||
import Menu from "@schemas/Menu";
|
||||
|
||||
const editorRouter = Router()
|
||||
|
||||
editorRouter.get('/', async (req, res) => {
|
||||
if (req.query.start && req.query.end) {
|
||||
const start = new Date(req.query.start.toString())
|
||||
const end = new Date(req.query.end.toString())
|
||||
res.send(await Menu.find({day: {$gte: start, $lte: end}}))
|
||||
} else {
|
||||
res.status(400).end()
|
||||
}
|
||||
})
|
||||
|
||||
export { editorRouter }
|
||||
42
src/routes/api/admin/groups.ts
Normal file
42
src/routes/api/admin/groups.ts
Normal file
@@ -0,0 +1,42 @@
|
||||
import Group from "@schemas/Group";
|
||||
import { Router } from "express"
|
||||
import { Perms, adminPerm } from "@/utility";
|
||||
import capability, { Features } from "@/capability";
|
||||
|
||||
const groupsRouter = Router()
|
||||
|
||||
groupsRouter.use(adminPerm(Perms.Groups))
|
||||
groupsRouter.use(capability.mw(Features.Groups))
|
||||
|
||||
groupsRouter.get('/', async (req, res)=> {
|
||||
res.send(await Group.find({}))
|
||||
})
|
||||
|
||||
groupsRouter.post('/', async (req, res)=> {
|
||||
if (await Group.create({name: req.body.name})) {
|
||||
res.status(201).send({status: 201})
|
||||
} else {
|
||||
res.sendStatus(500)
|
||||
}
|
||||
})
|
||||
|
||||
groupsRouter.put('/:id', async (req, res) => {
|
||||
let group = await Group.findById(req.params.id)
|
||||
if (!group) {
|
||||
res.status(404).send("Group not found")
|
||||
return
|
||||
}
|
||||
if (await group.set(req.body).save()) {
|
||||
res.send({status: 200}).end()
|
||||
return
|
||||
} else {
|
||||
res.sendStatus(500)
|
||||
}
|
||||
})
|
||||
|
||||
groupsRouter.delete('/:id', async (req, res) => {
|
||||
await Group.findByIdAndRemove(req.params.id)
|
||||
res.send({status: 200})
|
||||
})
|
||||
|
||||
export {groupsRouter};
|
||||
52
src/routes/api/admin/keys.ts
Normal file
52
src/routes/api/admin/keys.ts
Normal file
@@ -0,0 +1,52 @@
|
||||
import { Router } from "express";
|
||||
import capability, { Features } from "@/capability";
|
||||
import Key from "@schemas/Key";
|
||||
import usettings from "@/usettings";
|
||||
import User from "@schemas/User";
|
||||
import { Perms, adminPerm } from "@/utility";
|
||||
|
||||
const keysRouter = Router()
|
||||
|
||||
keysRouter.use(capability.mw(Features.Key))
|
||||
keysRouter.use(adminPerm(Perms.Key))
|
||||
|
||||
keysRouter.get("/", async (req, res) => {
|
||||
var keys = await Key.find({}, {}, {sort: {borrow: -1}}).populate("whom", {uname: 1, _id: 1, room: 1})
|
||||
res.send(keys)
|
||||
})
|
||||
|
||||
keysRouter.post("/", async (req, res) => {
|
||||
var newKey: {
|
||||
room: string;
|
||||
whom: string;
|
||||
} = req.body
|
||||
var user = await User.findOne({uname: newKey.whom})
|
||||
if (user) {
|
||||
newKey.whom = user._id.toString()
|
||||
} else {
|
||||
return res.status(404).send("User not found").end()
|
||||
}
|
||||
if (await Key.create(newKey)) {
|
||||
res.status(201).send({status: 201})
|
||||
} else {
|
||||
res.sendStatus(500)
|
||||
}
|
||||
})
|
||||
|
||||
keysRouter.get("/available", async (req, res) => {
|
||||
var taken = await Key.find({tb: {$exists: false}}, {}, {sort: {borrow: -1}})
|
||||
var occ = Array.from(new Set(taken.map((v) => v.room)))
|
||||
var all = Array.from(new Set(usettings.settings.keyrooms))
|
||||
var free = all.filter(x => !occ.includes(x))
|
||||
res.send(free)
|
||||
})
|
||||
|
||||
keysRouter.put("/:id", async (req, res) => {
|
||||
if (await Key.findByIdAndUpdate(req.params.id, req.body)) {
|
||||
res.send({status: 200})
|
||||
} else {
|
||||
res.sendStatus(500)
|
||||
}
|
||||
})
|
||||
|
||||
export { keysRouter }
|
||||
204
src/routes/api/admin/menu.ts
Normal file
204
src/routes/api/admin/menu.ts
Normal file
@@ -0,0 +1,204 @@
|
||||
import { Router } from "express"
|
||||
import { Perms, adminPerm, project } from "@/utility"
|
||||
import multer from "multer"
|
||||
import * as XLSX from "xlsx"
|
||||
import Menu from "@schemas/Menu"
|
||||
import Vote from "@schemas/Vote"
|
||||
import capability, { Features } from "@/capability"
|
||||
import { editorRouter } from "./editor"
|
||||
|
||||
const menuRouter = Router()
|
||||
|
||||
const storage = multer.memoryStorage()
|
||||
const upload = multer({storage: storage})
|
||||
|
||||
interface sheetObject {
|
||||
day: string;
|
||||
sn: string;
|
||||
sn2: string;
|
||||
ob: string;
|
||||
kol: string;
|
||||
}
|
||||
|
||||
menuRouter.use(adminPerm(Perms.Menu))
|
||||
menuRouter.use(capability.mw(Features.Menu))
|
||||
|
||||
menuRouter.get('/', async (req, res) => {
|
||||
if (req.query.start && req.query.end) {
|
||||
const start = new Date(req.query.start.toString())
|
||||
const end = new Date(req.query.end.toString())
|
||||
res.send(await Menu.find({day: {$gte: start, $lte: end}}, undefined, {sort: {day: 1}}))
|
||||
} else {
|
||||
res.status(400).end()
|
||||
}
|
||||
})
|
||||
|
||||
function dayName(date: Date) {
|
||||
switch (date.getDay()) {
|
||||
case 0:
|
||||
return "Niedziela"
|
||||
case 1:
|
||||
return "Poniedziałek"
|
||||
case 2:
|
||||
return "Wtorek"
|
||||
case 3:
|
||||
return "Środa"
|
||||
case 4:
|
||||
return "Czwartek"
|
||||
case 5:
|
||||
return "Piątek"
|
||||
case 6:
|
||||
return "Sobota"
|
||||
default:
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
menuRouter.get('/print', async (req, res) => {
|
||||
if (req.query.start && req.query.end) {
|
||||
const start = new Date(req.query.start.toString())
|
||||
const end = new Date(req.query.end.toString())
|
||||
var meals = await Menu.find({day: {$gte: start, $lte: end}}, undefined, {sort: {day: 1}})
|
||||
var doc = meals.map(s => `<tr>
|
||||
<th>${dayName(s.day)}<br>${s.day.getDate()}.${s.day.getMonth()}.${s.day.getFullYear()}r.<br>${s.dayTitle}</th>
|
||||
<td>${s.sn.fancy.join('<br>')}<br>${s.sn.second}</td>
|
||||
<td>
|
||||
Z: ${s.ob.soup}<br>
|
||||
V: ${s.ob.vege}<br>
|
||||
${s.ob.meal}<br>
|
||||
${s.ob.condiments.length != 0 ? s.ob.condiments.join('<br>') + "<br>" : ""}
|
||||
${s.ob.drink}<br>
|
||||
${s.ob.other.join('<br>')}
|
||||
</td>
|
||||
<td>${s.day.getUTCDay() == 5 ? "<b>Kolacja w domu!</b>" : s.kol}</td>
|
||||
</tr>`)
|
||||
var html = `<html><head><meta charset="UTF-8"><style>table,th,td{border: 1px solid;}td{line-height: 1.5;}</style></head><body><table><caption>Jadłospis dekadowy</caption><thead><tr><th>Dzień</th><th>Śniadanie</th><th>Obiad</th><th>Kolacja</th></tr></thead><tbody>${doc.join('\n')}</tbody></table></body></html>`
|
||||
res.type('html').send(html)
|
||||
} else {
|
||||
res.status(400).end()
|
||||
}
|
||||
})
|
||||
|
||||
menuRouter.get('/opts', async (req, res) => {
|
||||
var all = await Menu.find()
|
||||
var g = {
|
||||
sn: {
|
||||
fancy: Array.from(new Set(all.flatMap(v => v.sn.fancy).filter(v => v != ""))),
|
||||
second: Array.from(new Set(all.map(v => v.sn.second).filter(v => v != "")))
|
||||
},
|
||||
ob: {
|
||||
soup: Array.from(new Set(all.map(v => v.ob.soup).filter(v => v != ""))),
|
||||
vege: Array.from(new Set(all.map(v => v.ob.vege).filter(v => v != ""))),
|
||||
meal: Array.from(new Set(all.map(v => v.ob.meal).filter(v => v != ""))),
|
||||
condiments: Array.from(new Set(all.flatMap(v => v.ob.condiments).filter(v => v != ""))),
|
||||
drink: Array.from(new Set(all.map(v => v.ob.drink).filter(v => v != ""))),
|
||||
other: Array.from(new Set(all.flatMap(v => v.ob.other).filter(v => v != "")))
|
||||
},
|
||||
kol: Array.from(new Set(all.map(v => v.kol).filter(v => v != "")))
|
||||
}
|
||||
res.send(g)
|
||||
})
|
||||
|
||||
menuRouter.post('/:date', async (req, res) => {
|
||||
if (await Menu.create({day: new Date(req.params.date)})) {
|
||||
res.status(201).send({status: 201})
|
||||
} else {
|
||||
res.sendStatus(500);
|
||||
}
|
||||
|
||||
})
|
||||
|
||||
menuRouter.post('/:start/:count', async (req, res) => {
|
||||
var dates: any[] = []
|
||||
for (let i = 0; i < Number(req.params.count); i++) {
|
||||
var date = new Date(req.params.start)
|
||||
dates.push({day: date.setDate(date.getDate() + i)})
|
||||
}
|
||||
if (await Menu.create(dates)) {
|
||||
res.status(201).send({status: 201})
|
||||
} else {
|
||||
res.sendStatus(500);
|
||||
}
|
||||
})
|
||||
|
||||
menuRouter.post('/upload', upload.single('menu'), async (req,res)=> {
|
||||
if (!req.file) {
|
||||
res.status(400).send("File required")
|
||||
return
|
||||
}
|
||||
var sheet = XLSX.read(req.file.buffer)
|
||||
var data: sheetObject[] = XLSX.utils.sheet_to_json(sheet.Sheets[sheet.SheetNames[0]], {raw: true, header: ["day", "sn", "sn2", "ob", "kol"], range: 2})
|
||||
data = data.map((val, i) => {
|
||||
var result: any = {}
|
||||
var dateparts = val.day.match(/(\d{2})\.(\d{2})\.(\d{4})/)
|
||||
if (dateparts) {
|
||||
var date = new Date(parseInt(dateparts[3]),parseInt(dateparts[2])-1,parseInt(dateparts[1]))
|
||||
date.setUTCHours(0,0,0,0)
|
||||
} else {
|
||||
res.sendStatus(500)
|
||||
return
|
||||
}
|
||||
result.day = date
|
||||
result.sn = val.sn.split('\n')
|
||||
result.sn.push(val.sn2)
|
||||
|
||||
//#region ob
|
||||
var ob = val.ob
|
||||
ob = ob.replace(/^\s*\n/gm, "")
|
||||
ob = ob.replace(/ \/ /gm, "\n")
|
||||
ob = ob.replace(/:(?!\s)/gm, ": ")
|
||||
result.ob = ob.split('\n')
|
||||
//#endregion
|
||||
|
||||
result.kol = val.kol
|
||||
if (date.getUTCDay() == 5) {
|
||||
result.kol = null
|
||||
}
|
||||
return result
|
||||
})
|
||||
|
||||
if (await Menu.insertMany(data)) {
|
||||
res.status(201).send({status: 201})
|
||||
} else {
|
||||
res.sendStatus(500)
|
||||
}
|
||||
})
|
||||
|
||||
menuRouter.put('/:id', async (req, res) => {
|
||||
let menu = await Menu.findById(req.params.id)
|
||||
if (!menu) {
|
||||
res.status(404).send("Menu not found")
|
||||
return
|
||||
}
|
||||
let projField = project(req.body, Menu.schema.obj)
|
||||
if (projField) {
|
||||
try {
|
||||
await menu.set(projField).save()
|
||||
res.send({status: 200}).end()
|
||||
} catch (error) {
|
||||
res.status(500).send(error)
|
||||
}
|
||||
} else {
|
||||
res.status(400).send("No valid fields set")
|
||||
return
|
||||
}
|
||||
})
|
||||
|
||||
menuRouter.get('/:id/votes/:m', async (req, res) => {
|
||||
let votes = await Vote.find({dom: new Date(req.params.id)})
|
||||
if (!votes) {
|
||||
res.end()
|
||||
return
|
||||
}
|
||||
var fvotes = votes.filter(i => i.tom == req.params.m)
|
||||
var ycount = fvotes.filter(i => i.vote == "+").length
|
||||
var ncount = fvotes.filter(i => i.vote == "-").length
|
||||
res.send({
|
||||
y: ycount,
|
||||
n: ncount,
|
||||
})
|
||||
})
|
||||
|
||||
menuRouter.use('/editor', editorRouter)
|
||||
|
||||
export {menuRouter};
|
||||
27
src/routes/api/admin/news.ts
Normal file
27
src/routes/api/admin/news.ts
Normal file
@@ -0,0 +1,27 @@
|
||||
import { Router } from "express";
|
||||
import News from "@schemas/News"
|
||||
import { Perms, adminPerm } from "@/utility";
|
||||
import capability, { Features } from "@/capability";
|
||||
|
||||
const newsRouter = Router()
|
||||
|
||||
newsRouter.use(adminPerm(Perms.News))
|
||||
newsRouter.use(capability.mw(Features.News))
|
||||
|
||||
newsRouter.get('/', async (req,res)=>{
|
||||
res.send(await News.find({},null,{sort: {pinned: -1 ,date: -1}}))
|
||||
})
|
||||
newsRouter.post('/', async (req,res)=>{
|
||||
await News.create({title: req.body.title, content: req.body.content})
|
||||
res.status(201).send({status: 201})
|
||||
})
|
||||
newsRouter.delete('/:id', async (req,res)=>{
|
||||
await News.findByIdAndDelete(req.params.id)
|
||||
res.send({status: 200})
|
||||
})
|
||||
newsRouter.put('/:id', async (req,res)=>{
|
||||
await News.findByIdAndUpdate(req.params.id, req.body)
|
||||
res.send({status: 200})
|
||||
})
|
||||
|
||||
export {newsRouter};
|
||||
54
src/routes/api/admin/notif.ts
Normal file
54
src/routes/api/admin/notif.ts
Normal file
@@ -0,0 +1,54 @@
|
||||
import { Router } from "express";
|
||||
import { Perms, adminPerm } from "@/utility";
|
||||
import Group from "@schemas/Group";
|
||||
import { NotifcationHelper } from "@/notif";
|
||||
import capability, { Features } from "@/capability";
|
||||
|
||||
const notifRouter = Router()
|
||||
|
||||
const nh = new NotifcationHelper()
|
||||
|
||||
notifRouter.use(adminPerm(Perms.Notif))
|
||||
notifRouter.use(capability.mw(Features.Notif))
|
||||
|
||||
notifRouter.post("/send", async (req, res) => {
|
||||
const message = nh.simpleMessage(req.body.title, req.body.body)
|
||||
let recp: string | number
|
||||
let result;
|
||||
switch (req.body.recp.type) {
|
||||
case "uname":
|
||||
recp = req.body.recp.uname as string
|
||||
result = await message.user(recp);
|
||||
break;
|
||||
case "room":
|
||||
recp = req.body.recp.room as number
|
||||
result = await message.room(recp)
|
||||
break;
|
||||
case "all":
|
||||
recp = "all"
|
||||
result = await message.withRoom()
|
||||
break;
|
||||
case "group":
|
||||
if (!capability.settings.groups) return res.sendStatus(406).end()
|
||||
recp = req.body.recp.group as string
|
||||
result = await message.group(recp)
|
||||
break;
|
||||
default:
|
||||
res.status(400).end()
|
||||
break;
|
||||
}
|
||||
console.log(`
|
||||
From: ${req.user.uname} (${req.user._id})
|
||||
To: ${recp}
|
||||
Subject: ${req.body.title}
|
||||
|
||||
${req.body.body}
|
||||
`);
|
||||
res.send(result)
|
||||
})
|
||||
|
||||
notifRouter.get("/groups", async (req,res) => {
|
||||
res.send(await Group.find({}, {name: 1, _id: 1}))
|
||||
})
|
||||
|
||||
export {notifRouter}
|
||||
21
src/routes/api/admin/settings.ts
Normal file
21
src/routes/api/admin/settings.ts
Normal file
@@ -0,0 +1,21 @@
|
||||
import { Router } from "express";
|
||||
import { adminPerm, Perms, project } from "@/utility";
|
||||
import usettings from "@/usettings";
|
||||
|
||||
export const settingsRouter = Router()
|
||||
|
||||
settingsRouter.use(adminPerm(Perms.Superadmin))
|
||||
|
||||
settingsRouter.get('/', (req, res) => {
|
||||
res.send(usettings.settings)
|
||||
})
|
||||
|
||||
settingsRouter.post('/', (req, res) => {
|
||||
usettings.settings = project(req.body, {keyrooms: true, cleanThings: true, rooms: true})
|
||||
res.send({status: 200})
|
||||
})
|
||||
|
||||
settingsRouter.get('/reload', (req, res) => {
|
||||
usettings.reload()
|
||||
res.send({status: 200})
|
||||
})
|
||||
Reference in New Issue
Block a user