From 75b3730a7009eff7f8370f2ee5268d1e646f8722 Mon Sep 17 00:00:00 2001 From: Ali BARIN Date: Fri, 23 Jun 2023 21:26:46 +0000 Subject: [PATCH] feat(authorization): add delete flow checks --- packages/backend/src/graphql/mutations/delete-flow.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/packages/backend/src/graphql/mutations/delete-flow.ts b/packages/backend/src/graphql/mutations/delete-flow.ts index d7daddc7..903646cf 100644 --- a/packages/backend/src/graphql/mutations/delete-flow.ts +++ b/packages/backend/src/graphql/mutations/delete-flow.ts @@ -13,6 +13,8 @@ const deleteFlow = async ( params: Params, context: Context ) => { + context.currentUser.can('delete', 'Flow'); + const flow = await context.currentUser .$relatedQuery('flows') .findOne({