mirror of
https://github.com/willchen96/mike.git
synced 2026-07-26 23:51:08 +02:00
Merge pull request #193 from lawyered0/codex/restrict-folder-delete
Restrict project folder deletion to owners
This commit is contained in:
commit
4d1b792d68
1 changed files with 1 additions and 0 deletions
|
|
@ -828,6 +828,7 @@ projectsRouter.delete("/:projectId/folders/:folderId", requireAuth, async (req,
|
|||
|
||||
const access = await checkProjectAccess(projectId, userId, userEmail, db);
|
||||
if (!access.ok) return void res.status(404).json({ detail: "Project not found" });
|
||||
if (!access.isOwner) return void res.status(404).json({ detail: "Project not found" });
|
||||
|
||||
const { data: allFolders, error: foldersError } = await db
|
||||
.from("project_subfolders")
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue