@@ -15,7 +15,7 @@ export default async function savecontact(request) {
15
15
query . equalTo ( 'CreatedBy' , currentUserPtr ) ;
16
16
query . notEqualTo ( 'IsDeleted' , true ) ;
17
17
query . equalTo ( 'Email' , email ) ;
18
- const res = await query . first ( ) ;
18
+ const res = await query . first ( { sessionToken : request . user . getSessionToken ( ) } ) ;
19
19
if ( ! res ) {
20
20
const contactQuery = new Parse . Object ( 'contracts_Contactbook' ) ;
21
21
contactQuery . set ( 'Name' , name ) ;
@@ -24,7 +24,7 @@ export default async function savecontact(request) {
24
24
}
25
25
contactQuery . set ( 'Email' , email ) ;
26
26
contactQuery . set ( 'UserRole' , 'contracts_Guest' ) ;
27
-
27
+ contactQuery . set ( 'IsDeleted' , false ) ;
28
28
if ( tenantId ) {
29
29
contactQuery . set ( 'TenantId' , {
30
30
__type : 'Pointer' ,
@@ -49,8 +49,8 @@ export default async function savecontact(request) {
49
49
contactQuery . set ( 'CreatedBy' , currentUserPtr ) ;
50
50
contactQuery . set ( 'UserId' , user ) ;
51
51
const acl = new Parse . ACL ( ) ;
52
- acl . setPublicReadAccess ( true ) ;
53
- acl . setPublicWriteAccess ( true ) ;
52
+ acl . setReadAccess ( user . id , true ) ;
53
+ acl . setWriteAccess ( user . id , true ) ;
54
54
acl . setReadAccess ( currentUser . id , true ) ;
55
55
acl . setWriteAccess ( currentUser . id , true ) ;
56
56
contactQuery . setACL ( acl ) ;
@@ -71,8 +71,8 @@ export default async function savecontact(request) {
71
71
objectId : userRes . id ,
72
72
} ) ;
73
73
const acl = new Parse . ACL ( ) ;
74
- acl . setPublicReadAccess ( true ) ;
75
- acl . setPublicWriteAccess ( true ) ;
74
+ acl . setReadAccess ( userRes . id , true ) ;
75
+ acl . setWriteAccess ( userRes . id , true ) ;
76
76
acl . setReadAccess ( currentUser . id , true ) ;
77
77
acl . setWriteAccess ( currentUser . id , true ) ;
78
78
contactQuery . setACL ( acl ) ;
@@ -105,7 +105,7 @@ export default async function savecontact(request) {
105
105
query . equalTo ( 'CreatedBy' , currentUserPtr ) ;
106
106
query . notEqualTo ( 'IsDeleted' , true ) ;
107
107
query . equalTo ( 'Email' , email ) ;
108
- const res = await query . first ( ) ;
108
+ const res = await query . first ( { useMasterKey : true } ) ;
109
109
if ( ! res ) {
110
110
const contactQuery = new Parse . Object ( 'contracts_Contactbook' ) ;
111
111
contactQuery . set ( 'Name' , name ) ;
@@ -114,7 +114,7 @@ export default async function savecontact(request) {
114
114
}
115
115
contactQuery . set ( 'Email' , email ) ;
116
116
contactQuery . set ( 'UserRole' , 'contracts_Guest' ) ;
117
-
117
+ contactQuery . set ( 'IsDeleted' , false ) ;
118
118
if ( tenantId ) {
119
119
contactQuery . set ( 'TenantId' , {
120
120
__type : 'Pointer' ,
@@ -138,8 +138,8 @@ export default async function savecontact(request) {
138
138
contactQuery . set ( 'CreatedBy' , currentUserPtr ) ;
139
139
contactQuery . set ( 'UserId' , user ) ;
140
140
const acl = new Parse . ACL ( ) ;
141
- acl . setPublicReadAccess ( true ) ;
142
- acl . setPublicWriteAccess ( true ) ;
141
+ acl . setReadAccess ( user . id , true ) ;
142
+ acl . setWriteAccess ( user . id , true ) ;
143
143
acl . setReadAccess ( currentUser . id , true ) ;
144
144
acl . setWriteAccess ( currentUser . id , true ) ;
145
145
contactQuery . setACL ( acl ) ;
@@ -160,8 +160,8 @@ export default async function savecontact(request) {
160
160
objectId : userRes . id ,
161
161
} ) ;
162
162
const acl = new Parse . ACL ( ) ;
163
- acl . setPublicReadAccess ( true ) ;
164
- acl . setPublicWriteAccess ( true ) ;
163
+ acl . setReadAccess ( userRes . id , true ) ;
164
+ acl . setWriteAccess ( userRes . id , true ) ;
165
165
acl . setReadAccess ( currentUser . id , true ) ;
166
166
acl . setWriteAccess ( currentUser . id , true ) ;
167
167
contactQuery . setACL ( acl ) ;
0 commit comments