sudoxreboot/habitica
1
0
Fork 0
mirror of https://github.com/sudoxnym/habitica.git synced 2026-07-19 02:04:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

disallow fetching of chat messages

Browse source
This commit is contained in:
Alice Harris 2015-01-13 06:10:46 +10:00
parent c9f5113daa
commit 0bd22e7c77
1 changed files with 17 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
src/controllers/groups.js
View file

@ -211,8 +211,23 @@ api.attachGroup = function(req, res, next) {
}
api.getChat = function(req, res, next) {
return res.json(res.locals.group.chat);
}
// TODO: This code is duplicated from api.get - pull it out into a function to remove duplication.
var user = res.locals.user;
var gid = req.params.gid;
var q = (gid == 'party')
? Group.findOne({type: 'party', members: {$in:[user._id]}})
: Group.findOne({$or:[
{_id:gid, privacy:'public'},
{_id:gid, privacy:'private', members: {$in:[user._id]}}
]});
populateQuery(gid, q);
q.exec(function(err, group){
if (err) return next(err);
if (!group && gid!=='party') return res.json(404,{err: "Group not found or you don't have access."});
res.json(res.locals.group.chat);
gid = null;
});
};
/**
* TODO make this it's own ngResource so we don't have to send down group data with each chat post