diff options
author | Xavier Priour <xavier.priour@bubblyware.com> | 2015-12-11 19:20:19 +0100 |
---|---|---|
committer | Xavier Priour <xavier.priour@bubblyware.com> | 2015-12-11 19:20:19 +0100 |
commit | 7cfc72da995a247b77d24dca215e59af2f5ed5f0 (patch) | |
tree | 29a6db38a74b3a07de5dc954652d80578f229e58 /models | |
parent | f20b5d04f5e095de3348251ba669c5b13789298f (diff) | |
download | wekan-7cfc72da995a247b77d24dca215e59af2f5ed5f0.tar.gz wekan-7cfc72da995a247b77d24dca215e59af2f5ed5f0.tar.bz2 wekan-7cfc72da995a247b77d24dca215e59af2f5ed5f0.zip |
export works but no authentication
Diffstat (limited to 'models')
-rw-r--r-- | models/export.js | 28 |
1 files changed, 23 insertions, 5 deletions
diff --git a/models/export.js b/models/export.js index bc7cb8f9..7be97986 100644 --- a/models/export.js +++ b/models/export.js @@ -1,8 +1,26 @@ /* global JsonRoutes */ -JsonRoutes.add('get', '/api/b/:id', function (req, res) { - const id = req.params.id; - const exporter = new Exporter(id); - JsonRoutes.sendResult(res, 200, exporter.build()); +if(Meteor.isServer) { + console.log(`userId is ${this.userId}`); + JsonRoutes.add('get', '/api/b/:id', function (req, res) { + const id = req.params.id; + const board = Boards.findOne(id); + //if(Meteor.userId() && allowIsBoardMember(Meteor.userId(), board)) { + const exporter = new Exporter(id); + JsonRoutes.sendResult(res, 200, exporter.build()); + //} else { + // // 403 = forbidden + // JsonRoutes.sendError(res, 403); + //} + }); +} + +Meteor.methods({ + exportBoard(boardId) { + const board = Boards.findOne(boardId); +// //if(Meteor.userId() && allowIsBoardMember(Meteor.userId(), board)) { + const exporter = new Exporter(boardId); + return exporter.build(); + } }); class Exporter { @@ -45,7 +63,7 @@ class Exporter { 'profile.avatarUrl': 1, }}; result.users = Users.find(byUserIds, userFields).fetch(); - + //return JSON.stringify(result); return result; } } |