Skip to content

Commit ccd5a2a

Browse files
committed
Fixed: undefined roles in multi auth level queries crashed the query
1 parent 1ce0f67 commit ccd5a2a

File tree

3 files changed

+8
-4
lines changed

3 files changed

+8
-4
lines changed

.npmignore

+3-1
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,4 @@
11
test/
2-
README.md
2+
README.md
3+
.gitignore
4+
.travis.yml

index.js

+4-2
Original file line numberDiff line numberDiff line change
@@ -48,8 +48,10 @@ module.exports = function (schema) {
4848

4949
if (Array.isArray(authLevel)) {
5050
return authLevel.reduce(function (acc, level) {
51-
var fields = vm.schema.permissions[level][action] || [];
52-
return acc.concat(fields)
51+
if(vm.schema.permissions[level] && vm.schema.permissions[level][action]) {
52+
return acc.concat(vm.schema.permissions[level][action])
53+
}
54+
return acc.concat([])
5355
}, []);
5456
} else {
5557
return vm.schema.permissions[authLevel][action] || [];

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "mongoose-authorization",
3-
"version": "0.1.0",
3+
"version": "0.1.1",
44
"description": "Data level authorization for Mongoose",
55
"main": "index.js",
66
"scripts": {

0 commit comments

Comments
 (0)