From 51ddf138e82f2e1260719db7ea5b657005ad8e26 Mon Sep 17 00:00:00 2001 From: Dimitrie Stefanescu Date: Wed, 4 Dec 2019 14:28:23 +0000 Subject: [PATCH] fix(permissions): adds project owner to stream perms makes sure #118 doesn't happen fixes #118 --- app/api/projects/ProjectPutAddStream.js | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/app/api/projects/ProjectPutAddStream.js b/app/api/projects/ProjectPutAddStream.js index 582e54a8..edcf8e7d 100644 --- a/app/api/projects/ProjectPutAddStream.js +++ b/app/api/projects/ProjectPutAddStream.js @@ -20,10 +20,15 @@ module.exports = async ( req, res ) => { project.permissions.canRead.forEach( id => { stream.canRead.indexOf( id ) === -1 ? stream.canRead.push( id ) : null } ) + + stream.canRead.indexOf( project.owner ) === -1 ? stream.canRead.push( project.owner ) : null + project.permissions.canWrite.forEach( id => { stream.canWrite.indexOf( id ) === -1 ? stream.canWrite.push( id ) : null } ) + stream.canWrite.indexOf( project.owner ) === -1 ? stream.canWrite.push( project.owner ) : null + await Promise.all( [ stream.save( ), project.save( ) ] ) return res.send( { success: true, project: project, stream: stream } ) } catch ( err ) {