diff options
| author | mayjs <johannes.may@udo.edu> | 2017-05-15 21:06:52 +0200 |
|---|---|---|
| committer | mayjs <johannes.may@udo.edu> | 2017-05-15 21:06:52 +0200 |
| commit | cb99fc582ef50a4b6dfbbabdcf93998bc1478496 (patch) | |
| tree | e36d40cba029d1380c93faea29885f98cd4eaf74 /models | |
| parent | 066593f9c3b103aee134f4fd26e913021d82749c (diff) | |
| download | wekan-cb99fc582ef50a4b6dfbbabdcf93998bc1478496.tar.gz wekan-cb99fc582ef50a4b6dfbbabdcf93998bc1478496.tar.bz2 wekan-cb99fc582ef50a4b6dfbbabdcf93998bc1478496.zip | |
Modified access to GET /api/boards/:boardId/lists/:listId
Diffstat (limited to 'models')
| -rw-r--r-- | models/lists.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/models/lists.js b/models/lists.js index 8114ff5c..d9a5b8e2 100644 --- a/models/lists.js +++ b/models/lists.js @@ -147,9 +147,9 @@ if (Meteor.isServer) { }); JsonRoutes.add('GET', '/api/boards/:boardId/lists/:listId', function (req, res, next) { - Authentication.checkUserId( req.userId); const paramBoardId = req.params.boardId; const paramListId = req.params.listId; + Authentication.checkBoardAccess( req.userId, paramBoardId); JsonRoutes.sendResult(res, { code: 200, data: Lists.findOne({ _id: paramListId, boardId: paramBoardId, archived: false }), |