only admin can view all proposal

backend/webserver/api/proposals/controller.js

@@ -37,7 +37,7 @@ module.exports = function(dependencies, lib) {
 
   function getProposals(req, res) {
     var listOptions = {
-      creator: req.user.id,
+      creator: req.query.creator,
       type: req.query.type,
       status: req.query.status,
       limit: Number(req.query.limit),

frontend/app/common/most-proposal-api-client.service.js

@@ -6,7 +6,10 @@
 
   var API_PATH = 'proposals';
 
-  function mostProposalApiClient(mostRestangular) {
+  function mostProposalApiClient(
+    session,
+    mostRestangular
+  ) {
     return {
       createProposal: createProposal,
       getProposals: getProposals,
@@ -19,6 +22,10 @@
     }
 
     function getProposals(options) {
+      if (!session.userIsDomainAdministrator()) {
+        options.creator = session.user._id;
+      }
+
       return mostRestangular.all(API_PATH).getList(options).then(_stripAndReturnData).then(function(proposals) {
         return proposals.map(_decodeFormData);
       });