diff --git a/packages/xpub-faraday/config/authsome-helpers.js b/packages/xpub-faraday/config/authsome-helpers.js index e9eb600cbef1cb248ebf518e146e891f2e91afb3..5b6633a6150b55db19f733b1ef65351640ae6ccb 100644 --- a/packages/xpub-faraday/config/authsome-helpers.js +++ b/packages/xpub-faraday/config/authsome-helpers.js @@ -19,7 +19,7 @@ module.exports = { coll.visibleStatus = statuses[coll.status].private } }, - filterRefusedReviewers: (coll, user) => { + filterRefusedInvitations: (coll, user) => { const matchingInv = coll.invitations.find(inv => inv.userId === user.id) if (matchingInv === undefined) return null if (matchingInv.hasAnswer === true && !matchingInv.isAccepted) return null diff --git a/packages/xpub-faraday/config/authsome-mode.js b/packages/xpub-faraday/config/authsome-mode.js index a7c36a2cba9f8a3a1d772e1578ad76d072c62834..ac3198fe9a0a7f7ad6101fd96e3325ad5422a78f 100644 --- a/packages/xpub-faraday/config/authsome-mode.js +++ b/packages/xpub-faraday/config/authsome-mode.js @@ -35,8 +35,12 @@ async function teamPermissions(user, operation, object, context) { } helpers.setPublicStatuses(coll, matchingCollPerm) helpers.parseReviewerAuthors(coll, matchingCollPerm) - if (['reviewer'].includes(matchingCollPerm.permission)) { - return helpers.filterRefusedReviewers(coll, user) + if ( + ['reviewer', 'handlingEditor'].includes( + matchingCollPerm.permission, + ) + ) { + return helpers.filterRefusedInvitations(coll, user) } return coll })