From 5c8cca4009ac46f16ae715d4e09f1f0188afe026 Mon Sep 17 00:00:00 2001 From: yamanq Date: Wed, 10 Aug 2016 17:43:31 -0400 Subject: [PATCH] deleteWork no security --- hourglass/server/main.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/hourglass/server/main.js b/hourglass/server/main.js index 15e00f2..7a4426c 100644 --- a/hourglass/server/main.js +++ b/hourglass/server/main.js @@ -76,7 +76,8 @@ Meteor.methods({ }, 'deleteWork': function(workid) { - + // Add security here + work.remove({_id: workid}); }, 'editProfile': function(change) { current = Meteor.user().profile;