fix: project manager cannot delete/edit the project

This commit is contained in:
Takeshi Kimata
2024-06-11 21:53:43 +09:00
parent 996174f7a1
commit 4aaed1e918
2 changed files with 4 additions and 4 deletions

View File

@@ -7,12 +7,12 @@ const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize);
const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize);
const Project = defineProject(sequelize, DataTypes);
const Folder = defineFolder(sequelize, DataTypes);
const Run = defineRun(sequelize, DataTypes);
router.delete('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => {
router.delete('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => {
const projectId = req.params.projectId;
const t = await sequelize.transaction();

View File

@@ -5,10 +5,10 @@ const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize);
const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize);
const Project = defineProject(sequelize, DataTypes);
router.put('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => {
router.put('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => {
const projectId = req.params.projectId;
const { name, detail, isPublic } = req.body;
try {