diff --git a/packages/vulcan-users/lib/modules/permissions.js b/packages/vulcan-users/lib/modules/permissions.js index 0b44937d6..c8905d698 100644 --- a/packages/vulcan-users/lib/modules/permissions.js +++ b/packages/vulcan-users/lib/modules/permissions.js @@ -205,6 +205,7 @@ Users.isAdminById = Users.isAdmin; Users.getViewableFields = function (user, collection, document) { return Utils.arrayToFields(_.compact(_.map(collection.simpleSchema()._schema, (field, fieldName) => { + if (fieldName.indexOf('.$') > -1) return null; return Users.canReadField(user, field, document) ? fieldName : null; } )));