apunkt/mike
1
0
Fork 0
mirror of https://github.com/willchen96/mike.git synced 2026-07-26 23:51:08 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge pull request #175 from lawyered0/fix/tabular-review-owner-settings
Some checks are pending
CI / Backend build and tests (push) Waiting to run
Details
CI / Frontend build and tests (push) Waiting to run
Details
CI / Eval harness (push) Waiting to run
Details

Browse source 
Require review owner for tabular settings edits
This commit is contained in:
Will Chen 2026-07-27 01:51:05 +08:00 • committed by GitHub
commit a3ab1b3895
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
backend/src/routes/tabular.ts
View file

@ -395,6 +395,14 @@ tabularRouter.patch("/:reviewId", requireAuth, async (req, res) => {
);
if (!access.ok)
return void res.status(404).json({ detail: "Review not found" });
if (
(req.body.title != null || req.body.document_ids != null) &&
!access.isOwner
) {
return void res.status(403).json({
detail: "Only the review owner can change review settings",
});
}
if (req.body.columns_config != null) {
if (!access.isOwner) {
return void res.status(403).json({