Allow card creation for board members

- Only for members with card add permission
This commit is contained in:
Robert Lebedeu 2019-12-17 12:15:06 +01:00
parent 2c4d3fa317
commit 40c70c439d

View file

@ -2003,8 +2003,15 @@ if (Meteor.isServer) {
req,
res,
) {
Authentication.checkUserId(req.userId);
// Check user is logged in
Authentication.checkLoggedIn(req.userId);
const paramBoardId = req.params.boardId;
// Check user has permission to add card to the board
const board = Boards.findOne({
_id: paramBoardId
});
const addPermission = allowIsBoardMemberCommentOnly(req.userId, board);
Authentication.checkAdminOrCondition(req.userId, addPermission);
const paramListId = req.params.listId;
const paramParentId = req.params.parentId;
const currentCards = Cards.find(