From f135f7baad75b2f0b1ecb0636e70024626e08fee Mon Sep 17 00:00:00 2001 From: Carina Wollendorfer <30310907+CarinaWolli@users.noreply.github.com> Date: Mon, 24 Oct 2022 09:38:05 +0200 Subject: [PATCH] Fix unauthorized error when saving workflows (#5127) * fix wrong unauthorized error when no userId and teamId * use find instead of filter Co-authored-by: CarinaWolli Co-authored-by: alannnc Co-authored-by: kodiakhq[bot] <49736102+kodiakhq[bot]@users.noreply.github.com> --- packages/trpc/server/routers/viewer/workflows.tsx | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/trpc/server/routers/viewer/workflows.tsx b/packages/trpc/server/routers/viewer/workflows.tsx index 04d0881f82..a706830e2a 100644 --- a/packages/trpc/server/routers/viewer/workflows.tsx +++ b/packages/trpc/server/routers/viewer/workflows.tsx @@ -286,6 +286,7 @@ export const workflowsRouter = createProtectedRouter() id: newEventTypeId, }, include: { + users: true, team: { include: { members: true, @@ -296,7 +297,8 @@ export const workflowsRouter = createProtectedRouter() if ( newEventType && newEventType.userId !== user.id && - !newEventType?.team?.members.filter((membership) => membership.userId === user.id).length + !newEventType?.team?.members.find((membership) => membership.userId === user.id) && + !newEventType?.users.find((eventTypeUser) => eventTypeUser.id === user.id) ) { throw new TRPCError({ code: "UNAUTHORIZED" }); }