Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2026-01-05 17:18:49 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

board export now checks authentication

Browse source
This commit is contained in:
Xavier Priour 2015-12-13 20:02:34 +01:00
parent 7cfc72da99
commit 18697d45f6
6 changed files with 52 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

26
models/export.js
View file

@ -1,25 +1,15 @@
/* global JsonRoutes */
if(Meteor.isServer) {
console.log(`userId is ${this.userId}`);
JsonRoutes.add('get', '/api/b/:id', function (req, res) {
const id = req.params.id;
const board = Boards.findOne(id);
//if(Meteor.userId() && allowIsBoardMember(Meteor.userId(), board)) {
const exporter = new Exporter(id);
JsonRoutes.sendResult(res, 200, exporter.build());
//} else {
// // 403 = forbidden
// JsonRoutes.sendError(res, 403);
//}
});
}
Meteor.methods({
exportBoard(boardId) {
check(boardId, String);
const board = Boards.findOne(boardId);
// //if(Meteor.userId() && allowIsBoardMember(Meteor.userId(), board)) {
const exporter = new Exporter(boardId);
return exporter.build();
if(board.isVisibleByUser()) {
const exporter = new Exporter(boardId);
return exporter.build();
} else {
throw new Meteor.Error('error-board-notAMember');
}
}
});