|
@@ -19,6 +19,9 @@ function serializeInsecureUserAttributes(page) {
|
|
|
if (page.creator != null && page.creator._id != null) {
|
|
if (page.creator != null && page.creator._id != null) {
|
|
|
page.creator = serializeUserSecurely(page.creator);
|
|
page.creator = serializeUserSecurely(page.creator);
|
|
|
}
|
|
}
|
|
|
|
|
+ if (page.revision != null && page.revision.author != null && page.revision.author._id != null) {
|
|
|
|
|
+ page.revision.author = serializeUserSecurely(page.revision.author);
|
|
|
|
|
+ }
|
|
|
return page;
|
|
return page;
|
|
|
}
|
|
}
|
|
|
|
|
|
|
@@ -30,7 +33,8 @@ function serializePageSecurely(page) {
|
|
|
serialized = page.toObject();
|
|
serialized = page.toObject();
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
- depopulateRevisions(serialized);
|
|
|
|
|
|
|
+ // TODO: consider depopulate
|
|
|
|
|
+ // depopulateRevisions(serialized);
|
|
|
serializeInsecureUserAttributes(serialized);
|
|
serializeInsecureUserAttributes(serialized);
|
|
|
|
|
|
|
|
return serialized;
|
|
return serialized;
|