Fix Users can delete Boards from global archive (w/o permission).

Thanks to Meeques and xet7 !

Fixes #4631
This commit is contained in:
Lauri Ojansivu 2022-08-13 13:55:40 +03:00
parent dbcc8539bc
commit 54e6e32ab2

View file

@ -132,13 +132,13 @@ Meteor.publish('archivedBoards', function() {
return Boards.find( return Boards.find(
{ {
_id: { $in: Boards.userBoardIds(userId, true)}, _id: { $in: Boards.userBoardIds(userId, true)},
// archived: true, archived: true,
// members: { members: {
// $elemMatch: { $elemMatch: {
// userId, userId,
// isAdmin: true, isAdmin: true,
// }, },
// }, },
}, },
{ {
fields: { fields: {