Merge pull request #1726 from trendscenter/feature/1725-restrict-pipe…

…line-view Feature/1725 restrict pipeline view
trendscenter · Nov 16, 2023 · 0c6cc06 · 0c6cc06
2 parents b1161d4 + b6d49b8
commit 0c6cc06
Show file tree

Hide file tree

Showing 11 changed files with 53,679 additions and 91,451 deletions.
diff --git a/packages/coinstac-api-server/package-lock.json b/packages/coinstac-api-server/package-lock.json
diff --git a/packages/coinstac-api-server/src/data/resolvers.js b/packages/coinstac-api-server/src/data/resolvers.js
@@ -389,15 +389,11 @@ const resolvers = {
 
       steplessPipelines.forEach(p => pipelines[p._id] = p);
 
-      const memberConsortia = await db.collection('consortia').find({ [`members.${credentials.id}`]: { $exists: true } }).toArray();
-      const consortiaIds = memberConsortia.map(consortium => String(consortium._id));
-      let res = Object.values(pipelines);
-      if (!isAdmin(credentials.permissions)) {
-        res = res.filter(pipeline => {
-          return consortiaIds.includes(String(pipeline.owningConsortium))
-            || pipeline.shared;
-        });
-      }
+      const accessibleConsortia = await db.collection('consortia').find({ [`owners.${credentials.id}`]: { $exists: true } }).toArray();
+      const consortiaIds = accessibleConsortia.map(consortium => String(consortium._id));
+      const res = Object.values(pipelines).filter(pipeline =>
+        consortiaIds.includes(String(pipeline.owningConsortium)) || pipeline.shared
+      );
 
       return transformToClient(res);
     },