On board, BoardAdmin and normal user can now invite new user directly

with email address, without using Admin Panel or registering at /sign-up.
Closes #2060

Revert permission change.
Related 9f6d615ee5 (commitcomment-34636513)
Opens #2590

Thanks to xet7 !
This commit is contained in:
Lauri Ojansivu 2019-08-15 13:16:34 +03:00
parent ebf3e2e65b
commit 5c696e5a3c

View file

@ -260,7 +260,7 @@ Users.attachSchema(
Users.allow({
update(userId) {
const user = Users.findOne(userId);
return user; // && Meteor.user().isAdmin; // GitHub issue #2590
return user && Meteor.user().isAdmin; // GitHub issue #2590
},
remove(userId, doc) {
const adminsNumber = Users.find({ isAdmin: true }).count();
@ -610,8 +610,9 @@ if (Meteor.isServer) {
board &&
board.members &&
_.contains(_.pluck(board.members, 'userId'), inviter._id) &&
_.where(board.members, { userId: inviter._id })[0].isActive &&
_.where(board.members, { userId: inviter._id })[0].isAdmin;
_.where(board.members, { userId: inviter._id })[0].isActive;
// GitHub issue 2060
//_.where(board.members, { userId: inviter._id })[0].isAdmin;
if (!allowInvite) throw new Meteor.Error('error-board-notAMember');
this.unblock();