From f678dd02cbd3519f18eb8a0474158440663dcd18 Mon Sep 17 00:00:00 2001 From: prafull-opensignlabs Date: Mon, 20 Nov 2023 11:54:04 +0530 Subject: [PATCH] change in getDoucment cloud function --- .../cloud/parsefunction/getDocument.js | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/apps/OpenSignServer/cloud/parsefunction/getDocument.js b/apps/OpenSignServer/cloud/parsefunction/getDocument.js index e2e1d514c..81640f721 100644 --- a/apps/OpenSignServer/cloud/parsefunction/getDocument.js +++ b/apps/OpenSignServer/cloud/parsefunction/getDocument.js @@ -5,14 +5,22 @@ export default async function getDocument(request) { try { const query = new Parse.Query('contracts_Document'); query.equalTo('objectId', docId); - query.equalTo('ACL', new Parse.ACL(userId)); query.include('ExtUserPtr'); query.include('CreatedBy'); query.include('Signers'); query.include('AuditTrail.UserPtr'); query.include('Placeholders'); const res = await query.first({ useMasterKey: true }); - return res; + if (res) { + const acl = res.getACL(); + if (acl && acl.getReadAccess(userId)) { + return res; + } else { + return { error: "You don't have access of this document!" }; + } + } else { + return { error: "You don't have access of this document!" }; + } } catch (err) { console.log('err', err); return err;