krikkert/habitica
1
0
Fork 0
mirror of https://github.com/HabitRPG/habitica.git synced 2025-12-19 15:48:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

[#1711] limit number of members that get sent down with group, limit profile

Browse Source 
fields sent down
This commit is contained in:
Tyler Renelle
2013-11-01 19:27:08 -07:00
parent 74e4ef0414
commit 65b18f3af1
2 changed files with 37 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
src/controllers/groups.js
View File

@@ -105,28 +105,19 @@ api.get = function(req, res) {
var gid = req.params.gid;
// This will be called for the header, we need extra members' details than usuals
if (gid == 'party') {
Group.findOne({type: 'party', members: {'$in': [user._id]}})
.populate('members', partyFields)
.populate('invites', nameFields)
.populate('challenges', challengeFields)
.exec(function(err, group){
if (err) return res.json(500,{err:err});
res.json(group);
});
} else {
Group.findById(gid)
.populate('members', partyFields)
.populate('invites', nameFields)
.populate('challenges', challengeFields)
.exec(function(err, group){
if ( (group.type == 'guild' && group.privacy == 'private') || group.type == 'party') {
if(!_.find(group.members, {_id: user._id}))
return res.json(401, {err: "You don't have access to this group"});
}
res.json(group);
});
}
var q = (gid == 'party') ?
Group.findOne({type: 'party', members: {'$in': [user._id]}}).populate('members', partyFields) :
Group.findById(gid).populate({path: 'members', select: nameFields, options: {limit: 15} });
q.populate('invites', nameFields)
.populate('challenges', challengeFields)
.exec(function(err, group){
if ( (group.type == 'guild' && group.privacy == 'private') || (group.type == 'party' && gid != 'party')) {
if(!_.find(group.members, {_id: user._id}))
return res.json(401, {err: "You don't have access to this group"});
}
res.json(group);
});
};