summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorXavier Priour <xavier.priour@bubblyware.com>2015-12-11 19:20:19 +0100
committerXavier Priour <xavier.priour@bubblyware.com>2015-12-11 19:20:19 +0100
commit7cfc72da995a247b77d24dca215e59af2f5ed5f0 (patch)
tree29a6db38a74b3a07de5dc954652d80578f229e58
parentf20b5d04f5e095de3348251ba669c5b13789298f (diff)
downloadwekan-7cfc72da995a247b77d24dca215e59af2f5ed5f0.tar.gz
wekan-7cfc72da995a247b77d24dca215e59af2f5ed5f0.tar.bz2
wekan-7cfc72da995a247b77d24dca215e59af2f5ed5f0.zip
export works but no authentication
-rw-r--r--models/export.js28
1 files changed, 23 insertions, 5 deletions
diff --git a/models/export.js b/models/export.js
index bc7cb8f9..7be97986 100644
--- a/models/export.js
+++ b/models/export.js
@@ -1,8 +1,26 @@
/* global JsonRoutes */
-JsonRoutes.add('get', '/api/b/:id', function (req, res) {
- const id = req.params.id;
- const exporter = new Exporter(id);
- JsonRoutes.sendResult(res, 200, exporter.build());
+if(Meteor.isServer) {
+ console.log(`userId is ${this.userId}`);
+ JsonRoutes.add('get', '/api/b/:id', function (req, res) {
+ const id = req.params.id;
+ const board = Boards.findOne(id);
+ //if(Meteor.userId() && allowIsBoardMember(Meteor.userId(), board)) {
+ const exporter = new Exporter(id);
+ JsonRoutes.sendResult(res, 200, exporter.build());
+ //} else {
+ // // 403 = forbidden
+ // JsonRoutes.sendError(res, 403);
+ //}
+ });
+}
+
+Meteor.methods({
+ exportBoard(boardId) {
+ const board = Boards.findOne(boardId);
+// //if(Meteor.userId() && allowIsBoardMember(Meteor.userId(), board)) {
+ const exporter = new Exporter(boardId);
+ return exporter.build();
+ }
});
class Exporter {
@@ -45,7 +63,7 @@ class Exporter {
'profile.avatarUrl': 1,
}};
result.users = Users.find(byUserIds, userFields).fetch();
-
+ //return JSON.stringify(result);
return result;
}
}