瀏覽代碼

restore read access for user homepage

ryosei-f 3 周之前
父節點
當前提交
8007b743e6
共有 1 個文件被更改,包括 0 次插入4 次删除
  1. 0 4
      apps/app/src/server/routes/apiv3/bookmark-folder.ts

+ 0 - 4
apps/app/src/server/routes/apiv3/bookmark-folder.ts

@@ -240,10 +240,6 @@ module.exports = (crowi: Crowi) => {
     async (req, res) => {
       const { userId } = req.params;
 
-      if (userId !== req.user._id.toString()) {
-        return res.apiv3Err('forbidden', 403);
-      }
-
       const getBookmarkFolders = async (
         userId: Types.ObjectId | string,
         parentFolderId?: Types.ObjectId | string,