diff --git a/packages/xpub-faraday/config/authsome-mode.js b/packages/xpub-faraday/config/authsome-mode.js index b30cc31d339fb640883bc0e0cd631453a0c512ea..6ab6182b5bdeedf99d38c1a65cf0f7f521654e14 100644 --- a/packages/xpub-faraday/config/authsome-mode.js +++ b/packages/xpub-faraday/config/authsome-mode.js @@ -96,6 +96,10 @@ async function applyAuthenticatedUserPolicy(user, operation, object, context) { user, Team: context.models.Team, }) + + if (collection.owners.map(o => o.id).includes(user.id)) { + return collection + } // TODO: check why collPermission can be undefined const collPermission = userPermissions.find( p =>