Просмотр исходного кода

Merge pull request #10762 from growilabs/fix/177864-share-link-permission

feat: Allow viewing shared pages regardless of page permissions
mergify[bot] 2 месяцев назад
Родитель
Сommit
8fe911b8fa
1 измененных файлов с 4 добавлено и 1 удалено
  1. 4 1
      apps/app/src/server/service/page/find-page-and-meta-data-by-viewer.ts

+ 4 - 1
apps/app/src/server/service/page/find-page-and-meta-data-by-viewer.ts

@@ -79,7 +79,10 @@ export async function findPageAndMetaDataByViewer(
   const Page = mongoose.model<PageDoc, PageModel>('Page');
   const Page = mongoose.model<PageDoc, PageModel>('Page');
 
 
   let page: PageDoc | null;
   let page: PageDoc | null;
-  if (pageId != null) {
+  if (isSharedPage && pageId != null) {
+    // Share link access already validated upstream; skip permission filtering
+    page = await Page.findOne({ _id: { $eq: pageId } });
+  } else if (pageId != null) {
     // prioritized
     // prioritized
     page = await Page.findByIdAndViewer(pageId, user, null, true);
     page = await Page.findByIdAndViewer(pageId, user, null, true);
   } else {
   } else {