From aba07e5cb9e9b5668c4fb94bfe9f096a26538528 Mon Sep 17 00:00:00 2001
From: Joram Wilander <jwawilander@gmail.com>
Date: Fri, 31 Mar 2017 12:25:39 -0400
Subject: PLT-5483 Fix bug where flagged posts endpoint returned posts on other
 teams (#5765)

* Fix bug where flagged posts endpoint returned posts on other teams

* Include flagged posts from DMs/GMs
---
 api/post.go | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'api/post.go')

diff --git a/api/post.go b/api/post.go
index afe60144d..b4c34bca2 100644
--- a/api/post.go
+++ b/api/post.go
@@ -161,7 +161,12 @@ func getFlaggedPosts(c *Context, w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	if posts, err := app.GetFlaggedPosts(c.Session.UserId, offset, limit); err != nil {
+	if !app.SessionHasPermissionToTeam(c.Session, c.TeamId, model.PERMISSION_VIEW_TEAM) {
+		c.SetPermissionError(model.PERMISSION_VIEW_TEAM)
+		return
+	}
+
+	if posts, err := app.GetFlaggedPostsForTeam(c.Session.UserId, c.TeamId, offset, limit); err != nil {
 		c.Err = err
 		return
 	} else {
-- 
cgit v1.2.3-1-g7c22