opened yodlee up.

src/clj/auto_ap/routes/yodlee2.clj

@@ -1,18 +1,20 @@
 (ns auto-ap.routes.yodlee2
-  (:require 
-   [auto-ap.yodlee.core2 :as yodlee]
-   [auto-ap.graphql.utils :refer [assert-admin]]
+  (:require
+   [auto-ap.datomic :refer [conn]]
+   [auto-ap.datomic.clients :as d-clients]
+   [auto-ap.graphql.utils :refer [assert-admin assert-can-see-client]]
    [auto-ap.routes.utils :refer [wrap-secure]]
-   [compojure.core :refer [GET POST context defroutes wrap-routes]]
-   [config.core :refer [env]]
+   [auto-ap.yodlee.core2 :as yodlee]
    [clojure.tools.logging :as log]
-   [auto-ap.datomic.clients :as d-clients]))
+   [compojure.core :refer [context defroutes GET POST wrap-routes]]
+   [config.core :refer [env]]
+   [datomic.api :as d]))
 
 (defroutes routes
   (wrap-routes
    (context "/yodlee2" []
             (GET "/fastlink" {:keys [query-params identity] :as request}
-                 (assert-admin identity)
+                 (assert-can-see-client identity (d/pull (d/db conn) [:db/id] [:client/code (get query-params "client")]))
                  
                  (let [token (if-let [client-id (get query-params "client-id")]
                                (-> client-id