topics will no longer show up in /recent if user cannot access them

This commit is contained in:
Julian Lam
2013-12-23 21:50:47 -05:00
parent 8385ceef79
commit 8f879cd3eb

View File

@@ -262,9 +262,20 @@ var async = require('async'),
return;
}
Topics.getTopicsByTids(tids, current_user, function(topicData) {
latestTopics.topics = topicData;
callback(err, latestTopics);
// Filter out topics that belong to categories that this user cannot access
async.filter(tids, function(tid, next) {
threadTools.privileges(tid, current_user, function(err, privileges) {
if (!err && privileges.read) {
next(true);
} else {
next(false);
}
});
}, function(tids) {
Topics.getTopicsByTids(tids, current_user, function(topicData) {
latestTopics.topics = topicData;
callback(err, latestTopics);
});
});
});
}