From a6669415f5384859fb457c12fcff619fdcaab196 Mon Sep 17 00:00:00 2001 From: Ali BARIN Date: Fri, 23 Jun 2023 21:24:02 +0000 Subject: [PATCH] feat(authorization): add delete connection checks --- packages/backend/src/graphql/mutations/delete-connection.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/packages/backend/src/graphql/mutations/delete-connection.ts b/packages/backend/src/graphql/mutations/delete-connection.ts index 47cb7797..21abd2a3 100644 --- a/packages/backend/src/graphql/mutations/delete-connection.ts +++ b/packages/backend/src/graphql/mutations/delete-connection.ts @@ -11,6 +11,8 @@ const deleteConnection = async ( params: Params, context: Context ) => { + context.currentUser.can('delete', 'Connection'); + await context.currentUser .$relatedQuery('connections') .delete()