Fix Users can delete Boards from global archive (w/o permission).

Thanks to Meeques and xet7 !

Fixes #4631
This commit is contained in:
Lauri Ojansivu 2022-08-13 13:55:40 +03:00
parent dbcc8539bc
commit 54e6e32ab2

View file

@ -132,13 +132,13 @@ Meteor.publish('archivedBoards', function() {
return Boards.find(
{
_id: { $in: Boards.userBoardIds(userId, true)},
// archived: true,
// members: {
// $elemMatch: {
// userId,
// isAdmin: true,
// },
// },
archived: true,
members: {
$elemMatch: {
userId,
isAdmin: true,
},
},
},
{
fields: {