mirror of
https://github.com/HabitRPG/habitica.git
synced 2025-12-19 15:48:04 +01:00
Merge branch 'develop' of https://github.com/HabitRPG/habitrpg into develop
This commit is contained in:
@@ -230,4 +230,4 @@ habitrpg.controller("GroupsCtrl", ['$scope', '$rootScope', 'Groups', '$http', 'A
|
||||
User.log({op:'set',data:{'flags.rest':User.user.flags.rest}});
|
||||
}
|
||||
}
|
||||
])
|
||||
])
|
||||
|
||||
@@ -124,13 +124,12 @@ api.get = function(req, res) {
|
||||
var q = (gid == 'party') ? Group.findOne({type: 'party', members: {'$in': [user._id]}}) : Group.findById(gid);
|
||||
populateQuery(gid, q);
|
||||
q.exec(function(err, group){
|
||||
if (!group) return res.json(404, {err: 'Group not found'});
|
||||
if ( (group.type == 'guild' && group.privacy == 'private') || (group.type == 'party' && gid != 'party')) {
|
||||
if(!_.find(group.members, {_id: user._id}))
|
||||
return res.json(401, {err: "You don't have access to this group"});
|
||||
}
|
||||
res.json(group);
|
||||
});
|
||||
if ( group && (group.type == 'guild' && group.privacy == 'private') || (group.type == 'party')) {
|
||||
if(!_.find(group.members, {_id: user._id}))
|
||||
return res.json(401, {err: "You don't have access to this group"});
|
||||
}
|
||||
res.json(group);
|
||||
});
|
||||
};
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user