Implemented the change of /api/user/boards as proposed by huneau

This commit is contained in:
mayjs 2017-05-16 10:52:55 +02:00
parent 4ff906bd7b
commit 058aabff68

View file

@ -556,8 +556,12 @@ if (Meteor.isServer) {
//BOARDS REST API
if (Meteor.isServer) {
JsonRoutes.add('GET', '/api/user/boards', function (req, res, next) {
JsonRoutes.add('GET', '/api/user/:userId/boards', function (req, res, next) {
Authentication.checkLoggedIn(req.userId);
const paramUserId = req.params.userId;
// A normal user should be able to see their own boards,
// admins can access boards of any user
Authentication.checkAdminOrCondition(req.userId, req.userId === paramUserId);
const data = Boards.find({
archived: false,