Don't publish private boards meta-data to former members

Fixes #302
2025-12-16 15:30:13 +01:00 · 2015-12-21 18:05:40 +01:00 · 2015-12-21 18:05:40 +01:00 · 9b9d21030b
commit 9b9d21030b
parent 8a47cfa4ba
1 changed files with 4 additions and 1 deletions
--- a/server/publications/boards.js
+++ b/server/publications/boards.js
@ -16,8 +16,11 @@ Meteor.publish('boards', function() {
  return Boards.find({
    archived: false,
    $or: [
+      {
+        _id: { $in: starredBoards },
+        permission: 'public',
+      },
      { members: { $elemMatch: { userId: this.userId, isActive: true }}},
-      { _id: { $in: starredBoards } },
    ],
  }, {
    fields: {