From 827430c987ff6efec80a6e765a93c574fa63c5ed Mon Sep 17 00:00:00 2001
From: Stefan Zermatten <stefanzermatten@gmail.com>
Date: Thu, 12 Nov 2020 21:25:48 +0200
Subject: [PATCH] Fixed edit permission errors for some creature prop methods

---
 app/imports/api/creature/CreatureProperties.js | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/app/imports/api/creature/CreatureProperties.js b/app/imports/api/creature/CreatureProperties.js
index a73187b5..2581ab6c 100644
--- a/app/imports/api/creature/CreatureProperties.js
+++ b/app/imports/api/creature/CreatureProperties.js
@@ -293,7 +293,15 @@ const damagePropertiesByName = new ValidatedMethod({
   },
   run({creatureId, variableName, operation, value}) {
 		// Check permissions
-    assertEditPermission(creatureId, this.userId);
+    let creature = Creatures.findOne(creatureId, {
+      fields: {
+        damageMultipliers: 1,
+        owner: 1,
+        readers: 1,
+        writers: 1,
+      },
+    });
+    assertEditPermission(creature, this.userId);
     CreatureProperties.find({
       'ancestors.id': creatureId,
       variableName,
@@ -366,7 +374,7 @@ const dealDamage = new ValidatedMethod({
       },
     });
 		// Check permissions
-    assertEditPermission(creatureId, this.userId);
+    assertEditPermission(creature, this.userId);
     let healthBars = CreatureProperties.find({
       'ancestors.id': creatureId,
       type: 'attribute',