fix bug

odex25_mobile/odex_mobile/controllers/rest_api_v2/overtime.py

@@ -22,7 +22,14 @@ class OverTimeController(http.Controller):
     def get_overtime_datas(self,transfer_type=None, **kw):
         try:
             http_method, body, headers, token = http_helper.parse_request()
+            result = validator.verify_token(token)
+            if not result['status']:
+                return http_helper.errcode(code=result['code'], message=result['message'])
             user = validator.verify(token)
+            if not user:
+                return http_helper.response(code=400,
+                                            message=_("You are not allowed to perform this operation. please check with one of your team admins"),
+                                            success=False)
             data = {}
             if transfer_type == 'accounting':
                 account = request.env['account.account'].sudo().search([])