@@ -74,7 +74,10 @@ async function load(req, res, next) {
|
||||
function getApp(req, res, next) {
|
||||
assert.strictEqual(typeof req.app, 'object');
|
||||
|
||||
next(new HttpSuccess(200, apps.removeInternalFields(req.app)));
|
||||
const result = apps.removeInternalFields(req.app);
|
||||
result.accessLevel = apps.accessLevel(req.app, req.user);
|
||||
|
||||
next(new HttpSuccess(200, result));
|
||||
}
|
||||
|
||||
async function listByUser(req, res, next) {
|
||||
@@ -83,7 +86,11 @@ async function listByUser(req, res, next) {
|
||||
let [error, result] = await safe(apps.listByUser(req.user));
|
||||
if (error) return next(BoxError.toHttpError(error));
|
||||
|
||||
result = result.map(apps.removeRestrictedFields);
|
||||
result = result.map(r => {
|
||||
const app = apps.removeRestrictedFields(r);
|
||||
app.accessLevel = apps.accessLevel(r, req.user);
|
||||
return app;
|
||||
});
|
||||
|
||||
next(new HttpSuccess(200, { apps: result }));
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user