diff --git a/backend/routes/projects/delete.js b/backend/routes/projects/delete.js index 47dadc6..806f610 100644 --- a/backend/routes/projects/delete.js +++ b/backend/routes/projects/delete.js @@ -7,12 +7,12 @@ const { DataTypes } = require('sequelize'); module.exports = function (sequelize) { const { verifySignedIn } = require('../../middleware/auth')(sequelize); - const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize); + const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize); const Project = defineProject(sequelize, DataTypes); const Folder = defineFolder(sequelize, DataTypes); const Run = defineRun(sequelize, DataTypes); - router.delete('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => { + router.delete('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => { const projectId = req.params.projectId; const t = await sequelize.transaction(); diff --git a/backend/routes/projects/edit.js b/backend/routes/projects/edit.js index a90c65b..778f205 100644 --- a/backend/routes/projects/edit.js +++ b/backend/routes/projects/edit.js @@ -5,10 +5,10 @@ const { DataTypes } = require('sequelize'); module.exports = function (sequelize) { const { verifySignedIn } = require('../../middleware/auth')(sequelize); - const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize); + const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize); const Project = defineProject(sequelize, DataTypes); - router.put('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => { + router.put('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => { const projectId = req.params.projectId; const { name, detail, isPublic } = req.body; try {