Modified access to GET /api/boards/:boardId/lists/:listId

This commit is contained in:
mayjs 2017-05-15 21:06:52 +02:00
parent 066593f9c3
commit cb99fc582e

View file

@ -147,9 +147,9 @@ if (Meteor.isServer) {
});
JsonRoutes.add('GET', '/api/boards/:boardId/lists/:listId', function (req, res, next) {
Authentication.checkUserId( req.userId);
const paramBoardId = req.params.boardId;
const paramListId = req.params.listId;
Authentication.checkBoardAccess( req.userId, paramBoardId);
JsonRoutes.sendResult(res, {
code: 200,
data: Lists.findOne({ _id: paramListId, boardId: paramBoardId, archived: false }),