Fixing user details exposure in articles example

meanjs · Sep 29, 2013 · 0cfbafa · 0cfbafa
1 parent 2cab7b7
commit 0cfbafa
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app/controllers/articles.js b/app/controllers/articles.js
@@ -80,7 +80,7 @@ exports.show = function(req, res) {
  * List of Articles
  */
 exports.all = function(req, res) {
-    Article.find().sort('-created').populate('user').exec(function(err, articles) {
+    Article.find().sort('-created').populate('user', 'name username').exec(function(err, articles) {
         if (err) {
             res.render('error', {
                 status: 500

diff --git a/app/models/article.js b/app/models/article.js
@@ -44,7 +44,7 @@ ArticleSchema.statics = {
     load: function(id, cb) {
         this.findOne({
             _id: id
-        }).populate('user').exec(cb);
+        }).populate('user', 'name username').exec(cb);
     }
 };