From 4e6e484d8bb47a1c10c4452f41e3d5fc30766c54 Mon Sep 17 00:00:00 2001 From: Carina Wollendorfer <30310907+CarinaWolli@users.noreply.github.com> Date: Tue, 20 Sep 2022 13:00:43 -0400 Subject: [PATCH] only allow to add steps of user's workflow (#4637) Co-authored-by: CarinaWolli --- apps/web/public/static/locales/de/common.json | 2 +- packages/trpc/server/routers/viewer/workflows.tsx | 6 ++++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/apps/web/public/static/locales/de/common.json b/apps/web/public/static/locales/de/common.json index a7de2015dc..ab16eda8eb 100644 --- a/apps/web/public/static/locales/de/common.json +++ b/apps/web/public/static/locales/de/common.json @@ -465,7 +465,7 @@ "host_phone_number": "Ihre Telefonnummer", "enter_phone_number": "Telefonnummer eingeben", "reschedule": "Neuplanen", - "reschedule_this": "Stattdessen verschie", + "reschedule_this": "Stattdessen verschieben", "book_a_team_member": "Teammitglied stattdessen buchen", "or": "ODER", "go_back": "Zurück", diff --git a/packages/trpc/server/routers/viewer/workflows.tsx b/packages/trpc/server/routers/viewer/workflows.tsx index dab35d3715..3f5f924e78 100644 --- a/packages/trpc/server/routers/viewer/workflows.tsx +++ b/packages/trpc/server/routers/viewer/workflows.tsx @@ -616,9 +616,11 @@ export const workflowsRouter = createProtectedRouter() //added steps const addedSteps = steps.map((s) => { if (s.id <= 0) { - const { id, ...stepToAdd } = s; - if (stepToAdd) { + const { id: stepId, ...stepToAdd } = s; + if (stepToAdd.workflowId === id) { return stepToAdd; + } else { + throw new TRPCError({ code: "UNAUTHORIZED" }); } } });