Browse Source

restore read access for user homepage

ryosei-f 3 weeks ago
parent
commit
8007b743e6
1 changed files with 0 additions and 4 deletions
  1. 0 4
      apps/app/src/server/routes/apiv3/bookmark-folder.ts

+ 0 - 4
apps/app/src/server/routes/apiv3/bookmark-folder.ts

@@ -240,10 +240,6 @@ module.exports = (crowi: Crowi) => {
     async (req, res) => {
       const { userId } = req.params;
 
-      if (userId !== req.user._id.toString()) {
-        return res.apiv3Err('forbidden', 403);
-      }
-
       const getBookmarkFolders = async (
         userId: Types.ObjectId | string,
         parentFolderId?: Types.ObjectId | string,