fixes #12726 (#12727)

[FIX] API users.info returns caller rooms and not requested user ones
RocketChat · Dec 4, 2018 · 3dacacc · 3dacacc
1 parent 54294dd
commit 3dacacc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/rocketchat-api/server/v1/users.js b/packages/rocketchat-api/server/v1/users.js
@@ -130,7 +130,7 @@ RocketChat.API.v1.addRoute('users.info', { authRequired: true }, {
 
 		user = result[0];
 		if (fields.userRooms === 1 && RocketChat.authz.hasPermission(this.userId, 'view-other-user-channels')) {
-			user.rooms = RocketChat.models.Subscriptions.findByUserId(this.userId, {
+			user.rooms = RocketChat.models.Subscriptions.findByUserId(user._id, {
 				fields: {
 					rid: 1,
 					name: 1,