fix to enable ACL for confirm link sent by email

2014-03-23 21:06:22 -04:00 · 2014-03-23 21:06:22 -04:00 · e52dbe2fb5
parent 42c9777de3
commit e52dbe2fb5
1 changed files with 7 additions and 1 deletions
--- a/lib/models/user.js
+++ b/lib/models/user.js
@ -90,7 +90,13 @@ var options = {
      principalId: Role.OWNER,
      permission: ACL.ALLOW,
      property: "updateAttributes"
-    }
+    },
+     {
+      principalType: ACL.ROLE,
+      principalId: Role.EVERYONE,
+      permission: ACL.ALLOW,
+      property: "confirm"
+     }
  ],
  relations: {
    accessTokens: {