janpeter/Scrum4Me
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Fix scoped access checks

Browse source
This commit is contained in:
Janpeter Visser 2026-04-25 14:36:55 +02:00
parent d90a8fd560
commit e0efb65efb
7 changed files with 84 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app/api/products/route.ts
View file

@ -1,5 +1,6 @@
import { authenticateApiRequest } from '@/lib/api-auth'
import { prisma } from '@/lib/prisma'
import { productAccessFilter } from '@/lib/product-access'
export async function GET(request: Request) {
const auth = await authenticateApiRequest(request)
@ -8,7 +9,7 @@ export async function GET(request: Request) {
}
const products = await prisma.product.findMany({
where: { user_id: auth.userId, archived: false },
where: { archived: false, ...productAccessFilter(auth.userId) },
orderBy: { created_at: 'desc' },
select: { id: true, name: true, repo_url: true },
})