diff options
author | Lauri Ojansivu <x@xet7.org> | 2017-05-18 10:31:47 +0300 |
---|---|---|
committer | Lauri Ojansivu <x@xet7.org> | 2017-05-18 10:31:47 +0300 |
commit | 8de6461cf7d944bdc056aabd28f28df4f7df28b0 (patch) | |
tree | 1c32fb32517d1394c155d98bf184b0dbb5e5c5c0 /models/lists.js | |
parent | fe94ab0dde213d40d5e6f11e086678c4425ba377 (diff) | |
parent | e3fab5380690b955db7408f32b98b97f46497034 (diff) | |
download | wekan-8de6461cf7d944bdc056aabd28f28df4f7df28b0.tar.gz wekan-8de6461cf7d944bdc056aabd28f28df4f7df28b0.tar.bz2 wekan-8de6461cf7d944bdc056aabd28f28df4f7df28b0.zip |
Merge branch 'rest-api-pr' of https://github.com/mayjs/wekan into mayjs-rest-api-pr
Diffstat (limited to 'models/lists.js')
-rw-r--r-- | models/lists.js | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/models/lists.js b/models/lists.js index 7dbdc9f2..d9a5b8e2 100644 --- a/models/lists.js +++ b/models/lists.js @@ -132,8 +132,9 @@ if (Meteor.isServer) { //LISTS REST API if (Meteor.isServer) { JsonRoutes.add('GET', '/api/boards/:boardId/lists', function (req, res, next) { - Authentication.checkUserId( req.userId); const paramBoardId = req.params.boardId; + Authentication.checkBoardAccess( req.userId, paramBoardId); + JsonRoutes.sendResult(res, { code: 200, data: Lists.find({ boardId: paramBoardId, archived: false }).map(function (doc) { @@ -146,9 +147,9 @@ if (Meteor.isServer) { }); JsonRoutes.add('GET', '/api/boards/:boardId/lists/:listId', function (req, res, next) { - Authentication.checkUserId( req.userId); const paramBoardId = req.params.boardId; const paramListId = req.params.listId; + Authentication.checkBoardAccess( req.userId, paramBoardId); JsonRoutes.sendResult(res, { code: 200, data: Lists.findOne({ _id: paramListId, boardId: paramBoardId, archived: false }), |