@@ -207,7 +207,7 @@ export async function get_rpa_robots(req, res) {
207207 try {
208208 var rawAssertion = req . user . getAssertionXml ( ) ;
209209 var token = await NoderedUtil . GetTokenFromSAML ( rawAssertion ) ;
210- var result : any [ ] = await NoderedUtil . Query ( 'users' , { _type : "user" } ,
210+ var result : any [ ] = await NoderedUtil . Query ( 'users' , { $or : [ { _type : "user" } , { _type : "role" , rparole : true } ] } ,
211211 { name : 1 } , { name : - 1 } , 1000 , 0 , token . jwt )
212212 res . json ( result ) ;
213213 } catch ( error ) {
@@ -220,7 +220,22 @@ export async function get_rpa_workflows(req, res) {
220220 var token = await NoderedUtil . GetTokenFromSAML ( rawAssertion ) ;
221221 var q : any = { _type : "workflow" } ;
222222 if ( req . query . queue != null && req . query . queue != undefined && req . query . queue != "" && req . query . queue != "none" ) {
223- q = { _type : "workflow" , $or : [ { _createdbyid : req . query . queue } , { _modifiedbyid : req . query . queue } ] } ;
223+ q = {
224+ _type : "workflow" ,
225+ $or : [
226+ { _createdbyid : req . query . queue } ,
227+ { _modifiedbyid : req . query . queue } ,
228+ {
229+ _acl : {
230+ $elemMatch : {
231+ rights : { $bitsAllSet : [ 2 ] } ,
232+ deny : false ,
233+ _id : req . query . queue
234+ }
235+ }
236+ }
237+ ]
238+ } ;
224239 }
225240 var result : any [ ] = await NoderedUtil . Query ( 'openrpa' , q ,
226241 { name : 1 } , { name : - 1 } , 1000 , 0 , token . jwt )
0 commit comments