From 3dacacc8ca300b56a7b43ab1265c75450109ae51 Mon Sep 17 00:00:00 2001 From: Piotr Kochan Date: Tue, 4 Dec 2018 20:41:24 +0100 Subject: [PATCH] fixes #12726 (#12727) [FIX] API users.info returns caller rooms and not requested user ones --- packages/rocketchat-api/server/v1/users.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/rocketchat-api/server/v1/users.js b/packages/rocketchat-api/server/v1/users.js index d1e96b8c1f26..c5b791122e2e 100644 --- a/packages/rocketchat-api/server/v1/users.js +++ b/packages/rocketchat-api/server/v1/users.js @@ -130,7 +130,7 @@ RocketChat.API.v1.addRoute('users.info', { authRequired: true }, { user = result[0]; if (fields.userRooms === 1 && RocketChat.authz.hasPermission(this.userId, 'view-other-user-channels')) { - user.rooms = RocketChat.models.Subscriptions.findByUserId(this.userId, { + user.rooms = RocketChat.models.Subscriptions.findByUserId(user._id, { fields: { rid: 1, name: 1,