restrict to owners only

trendscenter · Nov 16, 2023 · 791f845 · 791f845
1 parent 3d059f8
commit 791f845
Show file tree

Hide file tree

Showing 8 changed files with 51,011 additions and 79,281 deletions.
diff --git a/packages/coinstac-api-server/package-lock.json b/packages/coinstac-api-server/package-lock.json
diff --git a/packages/coinstac-api-server/src/data/resolvers.js b/packages/coinstac-api-server/src/data/resolvers.js
@@ -389,7 +389,7 @@ const resolvers = {
 
       steplessPipelines.forEach(p => pipelines[p._id] = p);
 
-      const accessibleConsortia = await db.collection('consortia').find({ [`members.${credentials.id}`]: { $exists: true } }).toArray();
+      const accessibleConsortia = await db.collection('consortia').find({ [`owners.${credentials.id}`]: { $exists: true } }).toArray();
       const consortiaIds = accessibleConsortia.map(consortium => String(consortium._id));
       const res = Object.values(pipelines).filter(pipeline =>
         consortiaIds.includes(String(pipeline.owningConsortium)) || pipeline.shared