diff --git a/lib/noosfero/api/v1/communities.rb b/lib/noosfero/api/v1/communities.rb index e3f74ff..b9906ad 100644 --- a/lib/noosfero/api/v1/communities.rb +++ b/lib/noosfero/api/v1/communities.rb @@ -49,7 +49,7 @@ module Noosfero end get ':id' do - community = environment.communities.visible_for_person(current_person).find_by id: params[:id] + community = environment.communities.visible..find_by(id: params[:id]) present community, :with => Entities::Community, :current_person => current_person end diff --git a/lib/noosfero/api/v1/enterprises.rb b/lib/noosfero/api/v1/enterprises.rb index 25932f0..d662505 100644 --- a/lib/noosfero/api/v1/enterprises.rb +++ b/lib/noosfero/api/v1/enterprises.rb @@ -26,7 +26,7 @@ module Noosfero desc "Return one enterprise by id" get ':id' do - enterprise = environment.enterprises.visible_for_person(current_person).find_by id: params[:id] + enterprise = environment.enterprises.visible.find_by(id: params[:id]) present enterprise, :with => Entities::Enterprise, :current_person => current_person end diff --git a/lib/noosfero/api/v1/people.rb b/lib/noosfero/api/v1/people.rb index 0b52ec1..ecb4383 100644 --- a/lib/noosfero/api/v1/people.rb +++ b/lib/noosfero/api/v1/people.rb @@ -46,7 +46,7 @@ module Noosfero desc "Return the person information" get ':id' do - person = environment.people.visible_for_person(current_person).find_by id: params[:id] + person = environment.people.visible.find_by(id: params[:id]) return not_found! if person.blank? present person, :with => Entities::Person, :current_person => current_person end @@ -87,7 +87,11 @@ module Noosfero desc "Return the person friends" get ':id/friends' do +<<<<<<< HEAD person = environment.people.visible_for_person(current_person).find_by id: params[:id] +======= + person = environment.people.visible.find_by_id(params[:id]) +>>>>>>> get list visible communities, enterprises & people return not_found! if person.blank? friends = person.friends.visible present friends, :with => Entities::Person, :current_person => current_person diff --git a/test/api/people_test.rb b/test/api/people_test.rb index ab51742..e10db7a 100644 --- a/test/api/people_test.rb +++ b/test/api/people_test.rb @@ -96,12 +96,12 @@ class PeopleTest < ActiveSupport::TestCase assert json['person'].blank? end - should 'not get private people without permission' do + should 'get private people' do private_person = fast_create(Person, :public_profile => false) get "/api/v1/people/#{private_person.id}?#{params.to_query}" json = JSON.parse(last_response.body) - assert json['person'].blank? + assert_equal json['person']['id'], private_person.id end should 'get private person for friends' do -- libgit2 0.21.2