浏览代码

Fix checkBoardAccess authentication check

Robert Lebedeu 5 年之前
父节点
当前提交
2c4d3fa317
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      server/authentication.js

+ 1 - 1
server/authentication.js

@@ -58,7 +58,7 @@ Meteor.startup(() => {
     const board = Boards.findOne({ _id: boardId });
     const normalAccess =
       board.permission === 'public' ||
-      board.members.some(e => e.userId === userId).isActive;
+      board.members.some(e => e.userId === userId && e.isActive);
     Authentication.checkAdminOrCondition(userId, normalAccess);
   };