From e6849174c19abd7209c2d7acbedca15aeec3a1b3 Mon Sep 17 00:00:00 2001 From: Carina Wollendorfer <30310907+CarinaWolli@users.noreply.github.com> Date: Mon, 12 Sep 2022 03:15:58 -0400 Subject: [PATCH] Fixes security vulnerability in workflows (#4376) --- packages/trpc/server/routers/viewer/workflows.tsx | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/packages/trpc/server/routers/viewer/workflows.tsx b/packages/trpc/server/routers/viewer/workflows.tsx index cbdabf3a54..dab35d3715 100644 --- a/packages/trpc/server/routers/viewer/workflows.tsx +++ b/packages/trpc/server/routers/viewer/workflows.tsx @@ -287,13 +287,10 @@ export const workflowsRouter = createProtectedRouter() }, }, }); - if ( newEventType && newEventType.userId !== user.id && - newEventType?.team?.members.filter((membership) => { - membership.userId === user.id; - }).length + newEventType?.team?.members.filter((membership) => membership.userId === user.id).length === 0 ) { throw new TRPCError({ code: "UNAUTHORIZED" }); }