From b323df2fe0dcf38fc7835407ea2488afabc5a1a5 Mon Sep 17 00:00:00 2001 From: Baris Usakli Date: Tue, 3 Dec 2019 11:17:11 -0500 Subject: [PATCH] fix: allow members to search as well --- src/socket.io/groups.js | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/socket.io/groups.js b/src/socket.io/groups.js index 7d6417b700..b00af300a6 100644 --- a/src/socket.io/groups.js +++ b/src/socket.io/groups.js @@ -309,11 +309,12 @@ SocketGroups.loadMore = async (socket, data) => { SocketGroups.searchMembers = async (socket, data) => { data.uid = socket.uid; - const [isOwner, isAdmin] = await Promise.all([ + const [isOwner, isMember, isAdmin] = await Promise.all([ groups.ownership.isOwner(socket.uid, data.groupName), + groups.isMember(socket.uid, data.groupName), user.isAdministrator(socket.uid), ]); - if (!isOwner && !isAdmin) { + if (!isOwner && !isMember && !isAdmin) { throw new Error('[[error:no-privileges]]'); } return await groups.searchMembers(data);