stockpile-co / api

The API for Stockpile, an app that manages stuff for organizations.
0 stars 1 forks source link

hotfix/cross-organization categories in item custom fields #365

Closed AdamVig closed 7 years ago

AdamVig commented 7 years ago

The query for item custom fields included a join with all items that matched on categoryID, which would only match with items in the same organization, or categoryID is null, which would match with all items in the database. The latter could cause strange problems. Adding an and organizationID to the join fixes the problem.