fix(api): ensure when api user dont have org_id, check for workflow that org_id must be null as well
This commit is contained in:
		
							parent
							
								
									40d9060fda
								
							
						
					
					
						commit
						56ea34f2fa
					
				@ -68,7 +68,10 @@ export const createRun = withServerPromise(
 | 
				
			|||||||
        }
 | 
					        }
 | 
				
			||||||
      } else {
 | 
					      } else {
 | 
				
			||||||
        // is user api call, check user only
 | 
					        // is user api call, check user only
 | 
				
			||||||
        if (apiUser.user_id != workflow_version_data.workflow.user_id) {
 | 
					        if (
 | 
				
			||||||
 | 
					          apiUser.user_id != workflow_version_data.workflow.user_id &&
 | 
				
			||||||
 | 
					          workflow_version_data.workflow.org_id == null
 | 
				
			||||||
 | 
					        ) {
 | 
				
			||||||
          throw new Error("Workflow not found");
 | 
					          throw new Error("Workflow not found");
 | 
				
			||||||
        }
 | 
					        }
 | 
				
			||||||
      }
 | 
					      }
 | 
				
			||||||
 | 
				
			|||||||
@ -69,7 +69,7 @@ export async function getRunsData(user: APIKeyUserType, run_id: string) {
 | 
				
			|||||||
    }
 | 
					    }
 | 
				
			||||||
  } else {
 | 
					  } else {
 | 
				
			||||||
    // is user api call, check user only
 | 
					    // is user api call, check user only
 | 
				
			||||||
    if (data.workflow.user_id != user.user_id) {
 | 
					    if (data.workflow.user_id != user.user_id && data.workflow.org_id == null) {
 | 
				
			||||||
      return null;
 | 
					      return null;
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
  }
 | 
					  }
 | 
				
			||||||
 | 
				
			|||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user