瀏覽代碼

Fix share link permission

Ryotaro Nagahara 3 月之前
父節點
當前提交
bc959d8917
共有 1 個文件被更改,包括 4 次插入1 次删除
  1. 4 1
      apps/app/src/server/service/page/find-page-and-meta-data-by-viewer.ts

+ 4 - 1
apps/app/src/server/service/page/find-page-and-meta-data-by-viewer.ts

@@ -79,7 +79,10 @@ export async function findPageAndMetaDataByViewer(
   const Page = mongoose.model<PageDoc, PageModel>('Page');
 
   let page: PageDoc | null;
-  if (pageId != null) {
+  if (isSharedPage && pageId != null) {
+    // Share link access already validated upstream; skip permission filtering
+    page = await Page.findById(pageId);
+  } else if (pageId != null) {
     // prioritized
     page = await Page.findByIdAndViewer(pageId, user, null, true);
   } else {