topics will no longer show up in /recent if user cannot access them

v1.18.x
Julian Lam 11 years ago
parent 8385ceef79
commit 8f879cd3eb

@ -262,9 +262,20 @@ var async = require('async'),
return;
}
Topics.getTopicsByTids(tids, current_user, function(topicData) {
latestTopics.topics = topicData;
callback(err, latestTopics);
// Filter out topics that belong to categories that this user cannot access
async.filter(tids, function(tid, next) {
threadTools.privileges(tid, current_user, function(err, privileges) {
if (!err && privileges.read) {
next(true);
} else {
next(false);
}
});
}, function(tids) {
Topics.getTopicsByTids(tids, current_user, function(topicData) {
latestTopics.topics = topicData;
callback(err, latestTopics);
});
});
});
}

Loading…
Cancel
Save