This commit is contained in:
Jori Lallo
2016-06-02 22:21:46 -07:00
parent 9d6b9fc90a
commit 68d935f6b2

View File

@@ -21,7 +21,7 @@ router.post('documents.info', auth({ require: false }), async (ctx) => {
// Don't expose private documents outside the team // Don't expose private documents outside the team
if (document.private) { if (document.private) {
// if (!ctx.state.user) throw httpErrors.NotFound(); if (!ctx.state.user) throw httpErrors.NotFound();
const team = await ctx.state.user.getTeam(); const team = await ctx.state.user.getTeam();
if (document.teamId !== team.id) { if (document.teamId !== team.id) {