fix: Update serialization filter to include lastLoginAt visibility check for non-admin users

Author: maboukerfa

lib/ontologies_linked_data/models/users/user.rb

@@ -43,7 +43,7 @@ class User < LinkedData::Models::Base
       embed_values :role => [:role]
       serialize_default :username, :email, :role, :apikey
       serialize_never :passwordHash, :show_apikey, :resetToken, :resetTokenExpireTime
-      serialize_filter lambda {|inst| show_apikey?(inst)}
+      serialize_filter lambda {|inst| filter_attributes(inst)}
 
       link_to LinkedData::Hypermedia::Link.new("createdOntologies", lambda {|s| "users/#{s.id.split('/').last}/ontologies"}, nil)
 
@@ -63,6 +63,18 @@ def self.show_apikey?(inst)
         end
       end
 
+      def self.show_lastLoginAt?
+        unless Thread.current[:remote_user]&.admin?
+          return attributes - [:lastLoginAt]
+        end
+      end
+
+      def self.filter_attributes(inst)
+        attrs = show_apikey?(inst)
+        attrs = show_lastLoginAt?
+        attrs
+      end
+
       def embedded_doc
         "#{self.firstName} #{self.lastName} #{self.username}"
       end