From 8e859a38fa63d14da202891847a83084c78c66c1 Mon Sep 17 00:00:00 2001
From: Vincent Roman <vincent@delamainit.com>
Date: Fri, 7 Sep 2018 15:51:45 +0100
Subject: [PATCH] vulcan-users - permissions - filter out array based fields

---
 packages/vulcan-users/lib/modules/permissions.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages/vulcan-users/lib/modules/permissions.js b/packages/vulcan-users/lib/modules/permissions.js
index 0b44937d6..c8905d698 100644
--- a/packages/vulcan-users/lib/modules/permissions.js
+++ b/packages/vulcan-users/lib/modules/permissions.js
@@ -205,6 +205,7 @@ Users.isAdminById = Users.isAdmin;
 Users.getViewableFields = function (user, collection, document) {
   return Utils.arrayToFields(_.compact(_.map(collection.simpleSchema()._schema,
     (field, fieldName) => {
+      if (fieldName.indexOf('.$') > -1) return null;
       return Users.canReadField(user, field, document) ? fieldName : null;
     }
   )));