Quellcode durchsuchen

be sure user isAdmin

Ben0it-T vor 3 Jahren
Ursprung
Commit
349925ad6b
1 geänderte Dateien mit 30 neuen und 26 gelöschten Zeilen
  1. 30 26
      models/users.js

+ 30 - 26
models/users.js

@@ -1302,42 +1302,46 @@ if (Meteor.isServer) {
     setUsersTeamsTeamDisplayName(teamId, teamDisplayName) {
       check(teamId, String);
       check(teamDisplayName, String);
-      Users.find({
-        teams: {
-            $elemMatch: {teamId: teamId} 
-        }
-      }).forEach(user => {
-        Users.update({ 
-          _id: user._id,
+      if (Meteor.user() && Meteor.user().isAdmin) {
+        Users.find({
           teams: {
-            $elemMatch: {teamId: teamId} 
-          }
-        }, {
-          $set: {
-            'teams.$.teamDisplayName': teamDisplayName
+              $elemMatch: {teamId: teamId} 
           }
+        }).forEach(user => {
+          Users.update({ 
+            _id: user._id,
+            teams: {
+              $elemMatch: {teamId: teamId} 
+            }
+          }, {
+            $set: {
+              'teams.$.teamDisplayName': teamDisplayName
+            }
+          });
         });
-      });
+      }
     },
     setUsersOrgsOrgDisplayName(orgId, orgDisplayName) {
       check(orgId, String);
       check(orgDisplayName, String);
-      Users.find({
-        orgs: {
-            $elemMatch: {orgId: orgId} 
-        }
-      }).forEach(user => {
-        Users.update({ 
-          _id: user._id,
+      if (Meteor.user() && Meteor.user().isAdmin) {
+        Users.find({
           orgs: {
-            $elemMatch: {orgId: orgId} 
-          }
-        }, {
-          $set: {
-            'orgs.$.orgDisplayName': orgDisplayName
+              $elemMatch: {orgId: orgId} 
           }
+        }).forEach(user => {
+          Users.update({ 
+            _id: user._id,
+            orgs: {
+              $elemMatch: {orgId: orgId} 
+            }
+          }, {
+            $set: {
+              'orgs.$.orgDisplayName': orgDisplayName
+            }
+          });
         });
-      });
+      }
     },
   });
   Accounts.onCreateUser((options, user) => {