Fixing confidential fields computation.

Forgot something @naholyr ? :) Refs #222
SciencesPo · Jan 12, 2017 · 1a4fce7 · 1a4fce7 · naholyr · Jan 12, 2017
1 parent 2a14c27
commit 1a4fce7
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/server/lib/permissions.js b/server/lib/permissions.js
@@ -443,6 +443,7 @@ const canViewConfidentialFields = (req) => Promise.resolve(
 )
 
 const computeRestrictedFieldsLong = (modelName, userCentralRole, userRoles, organizationId) => {
+
 	// Central admin → no restriction
 	if (userCentralRole === 'admin') {
 		return Promise.resolve({
@@ -470,7 +471,7 @@ const computeRestrictedFieldsLong = (modelName, userCentralRole, userRoles, orga
 	})
 }
 
-const computeRestrictedFieldsShort = (modelName, req) => computeRestrictedFieldsLong(modelName, req.userRoles, req.userScopeOrganizationId)
+const computeRestrictedFieldsShort = (modelName, req) => computeRestrictedFieldsLong(modelName, req.userCentralRole, req.userRoles, req.userScopeOrganizationId)
 
 exports.computeRestrictedFields = (modelName, userCentralRoleOrReq, userRoles = undefined, organizationId = undefined) => {
 	if (userRoles !== undefined && organizationId !== undefined) {