From c6efcea9cfa13bfc356380da69b0945c3d31e649 Mon Sep 17 00:00:00 2001 From: Tyler Renelle Date: Thu, 21 Feb 2013 21:06:29 -0500 Subject: [PATCH] check invalidated session on somre more paths --- src/server/store.coffee | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/server/store.coffee b/src/server/store.coffee index 769b9098f5..da73da1ca7 100644 --- a/src/server/store.coffee +++ b/src/server/store.coffee @@ -85,11 +85,15 @@ partySystem = (store) -> 'auth.facebook.displayName') store.queryAccess "users", "party", (ids, accept, err) -> + err = arguments[arguments.length - 1] + return err(derbyAuth.SESSION_INVALIDATED_ERROR) if derbyAuth.sessionInvalidated(@) accept(true) # no harm in public user stats store.query.expose "parties", "withId", (id) -> @where("id").equals(id) store.queryAccess "parties", "withId", (id, accept, err) -> + err = arguments[arguments.length - 1] + return err(derbyAuth.SESSION_INVALIDATED_ERROR) if derbyAuth.sessionInvalidated(@) accept(true) store.readPathAccess "parties.*", -> @@ -97,5 +101,7 @@ partySystem = (store) -> accept(true) store.writeAccess "*", "parties.*", -> + err = arguments[arguments.length - 1] + return err(derbyAuth.SESSION_INVALIDATED_ERROR) if derbyAuth.sessionInvalidated(@) accept = arguments[arguments.length-2] accept(true)