Merge pull request #207 from prafull-opensignlabs/auth_user

apps/OpenSignServer/cloud/parsefunction/ZohoDetails.js

@@ -46,6 +46,10 @@ export default async function ZohoDetails(request) {
       (userData.data.data.subscription.customer &&
         userData.data.data.subscription.customer.company_name) ||
       '';
+    const jobTitle =
+      (userData.data.data.subscription.customer &&
+        userData.data.data.subscription.customer.cd_job_title) ||
+      '';
     const resData = {
       phone: userData.data.data.subscription.contactpersons[0].mobile,
       name: first_name + ' ' + last_name,
@@ -55,6 +59,7 @@ export default async function ZohoDetails(request) {
       plan: userData.data.data.subscription.plan,
       customer_id: userData.data.data.subscription.customer_id,
       subscription_id: userData.data.data.subscription.subscription_id,
+      jobTitle: jobTitle,
     };
     return resData;
   }

apps/OpenSignServer/cloud/parsefunction/getDocument.js

@@ -5,14 +5,22 @@ export default async function getDocument(request) {
     try {
       const query = new Parse.Query('contracts_Document');
       query.equalTo('objectId', docId);
-      query.equalTo('ACL', new Parse.ACL(userId));
       query.include('ExtUserPtr');
       query.include('CreatedBy');
       query.include('Signers');
       query.include('AuditTrail.UserPtr');
       query.include('Placeholders');
       const res = await query.first({ useMasterKey: true });
-      return res;
+      if (res) {
+        const acl = res.getACL();
+        if (acl && acl.getReadAccess(userId)) {
+          return res;
+        } else {
+          return { error: "You don't have access of this document!" };
+        }
+      } else {
+        return { error: "You don't have access of this document!" };
+      }
     } catch (err) {
       console.log('err', err);
       return err;