apunkt/mike
1
0
Fork 0
mirror of https://github.com/willchen96/mike.git synced 2026-07-26 23:51:08 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Require review owner for tabular settings edits

Browse source
This commit is contained in:
Lawyered 2026-06-10 14:00:38 -04:00
parent a211b92f38
commit 2a6d9eac3b
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
backend/src/routes/tabular.ts
View file

@ -534,6 +534,14 @@ tabularRouter.patch("/:reviewId", requireAuth, async (req, res) => {
);
if (!access.ok)
return void res.status(404).json({ detail: "Review not found" });
if (
(req.body.title != null || req.body.document_ids != null) &&
!access.isOwner
) {
return void res.status(403).json({
detail: "Only the review owner can change review settings",
});
}
if (req.body.columns_config != null) {
if (!access.isOwner) {
return void res.status(403).json({