diff --git a/apps/OpenSignServer/cloud/parsefunction/ZohoDetails.js b/apps/OpenSignServer/cloud/parsefunction/ZohoDetails.js index f2249e53b..0d9051b09 100644 --- a/apps/OpenSignServer/cloud/parsefunction/ZohoDetails.js +++ b/apps/OpenSignServer/cloud/parsefunction/ZohoDetails.js @@ -46,6 +46,10 @@ export default async function ZohoDetails(request) { (userData.data.data.subscription.customer && userData.data.data.subscription.customer.company_name) || ''; + const jobTitle = + (userData.data.data.subscription.customer && + userData.data.data.subscription.customer.cd_job_title) || + ''; const resData = { phone: userData.data.data.subscription.contactpersons[0].mobile, name: first_name + ' ' + last_name, @@ -55,6 +59,7 @@ export default async function ZohoDetails(request) { plan: userData.data.data.subscription.plan, customer_id: userData.data.data.subscription.customer_id, subscription_id: userData.data.data.subscription.subscription_id, + jobTitle: jobTitle, }; return resData; } diff --git a/apps/OpenSignServer/cloud/parsefunction/getDocument.js b/apps/OpenSignServer/cloud/parsefunction/getDocument.js index e2e1d514c..81640f721 100644 --- a/apps/OpenSignServer/cloud/parsefunction/getDocument.js +++ b/apps/OpenSignServer/cloud/parsefunction/getDocument.js @@ -5,14 +5,22 @@ export default async function getDocument(request) { try { const query = new Parse.Query('contracts_Document'); query.equalTo('objectId', docId); - query.equalTo('ACL', new Parse.ACL(userId)); query.include('ExtUserPtr'); query.include('CreatedBy'); query.include('Signers'); query.include('AuditTrail.UserPtr'); query.include('Placeholders'); const res = await query.first({ useMasterKey: true }); - return res; + if (res) { + const acl = res.getACL(); + if (acl && acl.getReadAccess(userId)) { + return res; + } else { + return { error: "You don't have access of this document!" }; + } + } else { + return { error: "You don't have access of this document!" }; + } } catch (err) { console.log('err', err); return err;