This commit is contained in:
Jori Lallo 2016-06-02 22:21:46 -07:00
parent 9d6b9fc90a
commit 68d935f6b2

View File

@ -21,7 +21,7 @@ router.post('documents.info', auth({ require: false }), async (ctx) => {
// Don't expose private documents outside the team
if (document.private) {
// if (!ctx.state.user) throw httpErrors.NotFound();
if (!ctx.state.user) throw httpErrors.NotFound();
const team = await ctx.state.user.getTeam();
if (document.teamId !== team.id) {