sup
This commit is contained in:
parent
9d6b9fc90a
commit
68d935f6b2
@ -21,7 +21,7 @@ router.post('documents.info', auth({ require: false }), async (ctx) => {
|
||||
|
||||
// Don't expose private documents outside the team
|
||||
if (document.private) {
|
||||
// if (!ctx.state.user) throw httpErrors.NotFound();
|
||||
if (!ctx.state.user) throw httpErrors.NotFound();
|
||||
|
||||
const team = await ctx.state.user.getTeam();
|
||||
if (document.teamId !== team.id) {
|
||||
|
Reference in New Issue
Block a user