From 0186c48d59130d56887a8d161c0e8a7e84a1aa13 Mon Sep 17 00:00:00 2001
From: prafull-opensignlabs
 <93375423+prafull-opensignlabs@users.noreply.github.com>
Date: Mon, 20 Nov 2023 12:00:41 +0530
Subject: [PATCH] Update getDocument.js

---
 .../cloud/parsefunction/getDocument.js               | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/apps/OpenSignServer/cloud/parsefunction/getDocument.js b/apps/OpenSignServer/cloud/parsefunction/getDocument.js
index e2e1d514c..81640f721 100644
--- a/apps/OpenSignServer/cloud/parsefunction/getDocument.js
+++ b/apps/OpenSignServer/cloud/parsefunction/getDocument.js
@@ -5,14 +5,22 @@ export default async function getDocument(request) {
     try {
       const query = new Parse.Query('contracts_Document');
       query.equalTo('objectId', docId);
-      query.equalTo('ACL', new Parse.ACL(userId));
       query.include('ExtUserPtr');
       query.include('CreatedBy');
       query.include('Signers');
       query.include('AuditTrail.UserPtr');
       query.include('Placeholders');
       const res = await query.first({ useMasterKey: true });
-      return res;
+      if (res) {
+        const acl = res.getACL();
+        if (acl && acl.getReadAccess(userId)) {
+          return res;
+        } else {
+          return { error: "You don't have access of this document!" };
+        }
+      } else {
+        return { error: "You don't have access of this document!" };
+      }
     } catch (err) {
       console.log('err', err);
       return err;