diff options
| author | Robert Lebedeu <robert.lebedeu@mynet.it> | 2019-12-16 18:10:48 +0100 |
|---|---|---|
| committer | Robert Lebedeu <robert.lebedeu@mynet.it> | 2019-12-16 18:10:48 +0100 |
| commit | 2c4d3fa317db1d271e0e3467b0c1092a3e492631 (patch) | |
| tree | 32759bc434e3adc84a2d6c52e8d7289e8324678d | |
| parent | a4dbe982991acc50a3c200f65af1377ce9499fa1 (diff) | |
| download | wekan-2c4d3fa317db1d271e0e3467b0c1092a3e492631.tar.gz wekan-2c4d3fa317db1d271e0e3467b0c1092a3e492631.tar.bz2 wekan-2c4d3fa317db1d271e0e3467b0c1092a3e492631.zip | |
Fix checkBoardAccess authentication check
| -rw-r--r-- | server/authentication.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/server/authentication.js b/server/authentication.js index 9e519fe1..20327280 100644 --- a/server/authentication.js +++ b/server/authentication.js @@ -58,7 +58,7 @@ Meteor.startup(() => { const board = Boards.findOne({ _id: boardId }); const normalAccess = board.permission === 'public' || - board.members.some(e => e.userId === userId).isActive; + board.members.some(e => e.userId === userId && e.isActive); Authentication.checkAdminOrCondition(userId, normalAccess); }; |