Elizhium/litlyx
1
0
Fork 0
mirror of https://github.com/Litlyx/litlyx synced 2025-12-10 15:58:38 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix guest actions

Browse Source
This commit is contained in:
Emily
2024-06-19 23:38:22 +02:00
parent c1a15c8fc2
commit 149592394d
9 changed files with 27 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
dashboard/server/api/ai/[project_id]/send_message.post.ts
View File

@@ -10,7 +10,7 @@ export default defineEventHandler(async event => {
if (!project_id) return;
const user = getRequestUser(event);
const project = await getUserProjectFromId(project_id, user);
const project = await getUserProjectFromId(project_id, user, false);
if (!project) return;
// if (!user?.logged) return;

6
dashboard/server/api/metrics/[project_id]/query.ts
View File

@@ -8,8 +8,12 @@ export default defineEventHandler(async event => {
if (!user?.logged) return;
const project_id = getRequestProjectId(event);
if (!project_id) return;
const project = await ProjectModel.findOne({ _id: project_id, owner: user.id });
const project = await ProjectModel.findOne({ _id: project_id });
if (!project) return;
const [hasAccess] = await hasAccessToProject(user.id, project_id, project)
if (!hasAccess) return;
const query = getQuery(event);
const { orderBy, order, page, limit, type } = query;

2
dashboard/server/api/pay/[project_id]/invoices.ts
View File

@@ -17,7 +17,7 @@ export default defineEventHandler(async event => {
if (!project_id) return;
const user = getRequestUser(event);
const project = await getUserProjectFromId(project_id, user);
const project = await getUserProjectFromId(project_id, user, false);
if (!project) return;
if (!project.customer_id) return [];

2
dashboard/server/api/user/set_active_project.ts
View File

@@ -13,7 +13,7 @@ export default defineEventHandler(async event => {
const { project_id } = getQuery(event);
const hasAccess = await hasAccessToProject(userData.id, project_id as string);
const [hasAccess] = await hasAccessToProject(userData.id, project_id as string);
if (!hasAccess) return setResponseStatus(event, 400, 'No access to project');