FIX: Do not show automatic groups to normal users.

This commit is contained in:
Guo Xiang Tan
2016-12-20 14:26:15 +08:00
parent ea9f7a41af
commit 193f8301a4
2 changed files with 35 additions and 8 deletions

View File

@ -14,10 +14,13 @@ class GroupsController < ApplicationController
page_size = 30
page = params[:page]&.to_i || 0
groups = Group.order(user_count: :desc, name: :asc)
.where(visible: true)
.offset(page * page_size)
.limit(page_size)
groups = Group.order(user_count: :desc, name: :asc).where(visible: true)
if !guardian.is_admin?
groups = groups.where(automatic: false)
end
groups = groups.offset(page * page_size).limit(page_size)
render json: {
groups: serialize_data(groups, BasicGroupSerializer),