diff --git a/server/admin/src/server/router/api.ts b/server/admin/src/server/router/api.ts index 2802e7f687c..59f9675db78 100644 --- a/server/admin/src/server/router/api.ts +++ b/server/admin/src/server/router/api.ts @@ -172,6 +172,7 @@ router.use( auth(), raExpressMongoose(userModel, { q: ['_id', 'nickname', 'email'], + allowedRegexFields: ['nickname'], }) ); router.delete('/messages/:id', auth(), async (req, res) => {