From 4aaed1e918442872d1d57eee85cc1042c910ce79 Mon Sep 17 00:00:00 2001 From: Takeshi Kimata <117462761+kimatata@users.noreply.github.com> Date: Tue, 11 Jun 2024 21:53:43 +0900 Subject: [PATCH] fix: project manager cannot delete/edit the project --- backend/routes/projects/delete.js | 4 ++-- backend/routes/projects/edit.js | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/backend/routes/projects/delete.js b/backend/routes/projects/delete.js index 47dadc6..806f610 100644 --- a/backend/routes/projects/delete.js +++ b/backend/routes/projects/delete.js @@ -7,12 +7,12 @@ const { DataTypes } = require('sequelize'); module.exports = function (sequelize) { const { verifySignedIn } = require('../../middleware/auth')(sequelize); - const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize); + const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize); const Project = defineProject(sequelize, DataTypes); const Folder = defineFolder(sequelize, DataTypes); const Run = defineRun(sequelize, DataTypes); - router.delete('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => { + router.delete('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => { const projectId = req.params.projectId; const t = await sequelize.transaction(); diff --git a/backend/routes/projects/edit.js b/backend/routes/projects/edit.js index a90c65b..778f205 100644 --- a/backend/routes/projects/edit.js +++ b/backend/routes/projects/edit.js @@ -5,10 +5,10 @@ const { DataTypes } = require('sequelize'); module.exports = function (sequelize) { const { verifySignedIn } = require('../../middleware/auth')(sequelize); - const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize); + const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize); const Project = defineProject(sequelize, DataTypes); - router.put('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => { + router.put('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => { const projectId = req.params.projectId; const { name, detail, isPublic } = req.body; try {