feat(challenges): optional checkbox on group create/edit:
restrict challenge-creation to leader. Commented-out code for similar setup for member invites, shouldn't be hard
This commit is contained in:
@@ -159,8 +159,8 @@ api.create = function(req, res, next){
|
||||
prize = +req.body.prize;
|
||||
if (!group)
|
||||
return cb({code:404, err:"Group." + req.body.group + " not found"});
|
||||
//if (group.leaderOnly.challenges && group.leader !== user._id)
|
||||
// return cb({code:401, err: "Only the group leader can create challenges"});
|
||||
if (group.leaderOnly && group.leaderOnly.challenges && group.leader !== user._id)
|
||||
return cb({code:401, err: "Only the group leader can create challenges"});
|
||||
// If they're adding a prize, do some validation
|
||||
if (prize < 0)
|
||||
return cb({code:401, err: 'Challenge prize must be >= 0'});
|
||||
|
||||
@@ -187,7 +187,7 @@ api.update = function(req, res, next) {
|
||||
if(group.leader !== user._id)
|
||||
return res.json(401, {err: "Only the group leader can update the group!"});
|
||||
|
||||
'name description logo logo leaderMessage leader'.split(' ').forEach(function(attr){
|
||||
'name description logo logo leaderMessage leader leaderOnly'.split(' ').forEach(function(attr){
|
||||
group[attr] = req.body[attr];
|
||||
});
|
||||
|
||||
|
||||
Reference in New Issue
Block a user