Merge pull request #193 from lawyered0/codex/restrict-folder-delete

Restrict project folder deletion to owners
This commit is contained in:
Will Chen 2026-07-26 18:21:50 +08:00 committed by GitHub
commit 4d1b792d68
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -828,6 +828,7 @@ projectsRouter.delete("/:projectId/folders/:folderId", requireAuth, async (req,
const access = await checkProjectAccess(projectId, userId, userEmail, db);
if (!access.ok) return void res.status(404).json({ detail: "Project not found" });
if (!access.isOwner) return void res.status(404).json({ detail: "Project not found" });
const { data: allFolders, error: foldersError } = await db
.from("project_subfolders")