Add manager profile editing functionality

[Nandgopal-R]

Add API for Updating Manager Profile

Description

This pull request adds an API endpoint editManagerProfileById , which allows authorized user to update a manager's profile

Features

• Added the editManagerProfileById API endpoint
• Introduced a new POST route: /manager/profile/edit

This PR handles issue #4

Please review @Ashrockzzz2003

[Ashrockzzz2003]

The goal is to update only the name. Please make changes accordingly. Only the manager themself will access this API. Therefore, userRole 0 is the only role authorised to use this route. Update logic to support that.

[Ashrockzzz2003]

The password update will happen thru forget password and this. Insecure way! Also, email cannot be updated by the manager.

[Ashrockzzz2003]

even this too. Only name can be edited.

[Ashrockzzz2003]

this is for the manager to update by themselves. hence userRole can only be 0.

[Nandgopal-R]

The goal is to update only the name. Please make changes accordingly. Only the manager themself will access this API. Therefore, userRole 0 is the only role authorised to use this route. Update logic to support that.

Ohh ok, I'll change it

[Nandgopal-R]

@Ashrockzzz2003, since only the name is being edited should I do all these checks or should I only validate the name of the manager and only pass the name of the manager in the request body?

[Ashrockzzz2003]

@Ashrockzzz2003, since only the name is being edited should I do all these checks or should I only validate the name of the manager and only pass the name of the manager in the request body?

The request body only will have the updated name.

1. The user role comes through the token validator. Validating if the userRole is that of manager is the first check.
2. With the userEmail field that's extracted from token, query the db to extract the managerId.
3. Validate the managerName now. Update it.

[Nandgopal-R]

So a manager can only change his own name or they can change anyone's name?

If they are allowed to change anyone's name should'nt the id also be passed in the request body?

[Ashrockzzz2003]

So a manager can only change his own name or they can change anyone's name?

If they are allowed to change anyone's name should'nt the id also be passed in the request body?

Yes
But this api is to edit only manager's name by themselves. Maybe we can extend it to allow admin to modify name. That case we'll need manager id. If you're planning to add that too, do it.

[Nandgopal-R]

So a manager can only change his own name or they can change anyone's name?
If they are allowed to change anyone's name should'nt the id also be passed in the request body?

Yes But this api is to edit only manager's name by themselves. Maybe we can extend it to allow admin to modify name. That case we'll need manager id. If you're planning to add that too, do it.

I'll add it

[Nandgopal-R]

@Ashrockzzz2003 I have made the changes