diff options
| author | mayjs <johannes.may@udo.edu> | 2017-05-15 21:03:42 +0200 |
|---|---|---|
| committer | mayjs <johannes.may@udo.edu> | 2017-05-15 21:03:42 +0200 |
| commit | 066593f9c3b103aee134f4fd26e913021d82749c (patch) | |
| tree | debfe45e1605d6d984b9c1ac1ed3606ac8abce4f /models/lists.js | |
| parent | 1e8d9f02f32a83bc3514330be53f7bd21156142b (diff) | |
| download | wekan-066593f9c3b103aee134f4fd26e913021d82749c.tar.gz wekan-066593f9c3b103aee134f4fd26e913021d82749c.tar.bz2 wekan-066593f9c3b103aee134f4fd26e913021d82749c.zip | |
Modified access to GET /api/boards/:boardId/lists
Diffstat (limited to 'models/lists.js')
| -rw-r--r-- | models/lists.js | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/models/lists.js b/models/lists.js index 7dbdc9f2..8114ff5c 100644 --- a/models/lists.js +++ b/models/lists.js @@ -132,8 +132,9 @@ if (Meteor.isServer) { //LISTS REST API if (Meteor.isServer) { JsonRoutes.add('GET', '/api/boards/:boardId/lists', function (req, res, next) { - Authentication.checkUserId( req.userId); const paramBoardId = req.params.boardId; + Authentication.checkBoardAccess( req.userId, paramBoardId); + JsonRoutes.sendResult(res, { code: 200, data: Lists.find({ boardId: paramBoardId, archived: false }).map(function (doc) { |