Revision Model: Respond only public fields

lib/models/revision.js

@@ -38,7 +38,8 @@ module.exports = function(crowi) {
   };
 
   revisionSchema.statics.findRevisions = function(ids) {
-    var Revision = this;
+    var Revision = this,
+        User = crowi.model('User');
 
     if (!Array.isArray(ids)) {
       return Promise.reject('The argument was not Array.');
@@ -48,7 +49,7 @@ module.exports = function(crowi) {
       Revision
         .find({ _id: { $in: ids }})
         .sort({createdAt: -1})
-        .populate('author')
+        .populate('author', User.USER_PUBLIC_FIELDS)
         .exec(function(err, revisions) {
           if (err) {
             return reject(err);
@@ -60,12 +61,13 @@ module.exports = function(crowi) {
   };
 
   revisionSchema.statics.findRevisionList = function(path, options) {
-    var Revision = this;
+    var Revision = this,
+        User = crowi.model('User');
 
     return new Promise(function(resolve, reject) {
       Revision.find({path: path})
         .sort({createdAt: -1})
-        .populate('author')
+        .populate('author', User.USER_PUBLIC_FIELDS)
         .exec(function(err, data) {
           if (err) {
             return reject(err);