groot/automatisch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: let permitted users create step in not-owned flows

Browse Source
This commit is contained in:
Ali BARIN
2023-11-07 15:49:51 +00:00
parent 94d7162782
commit 0873cfa997
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
packages/backend/src/graphql/mutations/create-step.ts
View File

@@ -1,4 +1,5 @@
import App from '../../models/app';
import Flow from '../../models/flow';
import Context from '../../types/express/context';
type Params = {
@@ -22,7 +23,10 @@ const createStep = async (
params: Params,
context: Context
) => {
context.currentUser.can('update', 'Flow');
const conditions = context.currentUser.can('update', 'Flow');
const userFlows = context.currentUser.$relatedQuery('flows');
const allFlows = Flow.query();
const flowsQuery = conditions.isCreator ? userFlows : allFlows;
const { input } = params;
@@ -34,8 +38,7 @@ const createStep = async (
await App.findOneByKey(input.appKey);
}
const flow = await context.currentUser
.$relatedQuery('flows')
const flow = await flowsQuery
.findOne({
id: input.flow.id,
})