namenlos/three60
1
0
Fork 0
Code Issues 12 Pull requests Projects Releases Packages Wiki Activity Actions

fix wrong query condition preventing users from accessing surveys shared with anyone

Browse source 
Closes #20
This commit is contained in:
Markus Brueckner 2025-02-20 20:10:09 +01:00
parent 457249c4e3
commit 5b39c03a7d
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/db/survey.ts
View file

@ -20,7 +20,8 @@ export async function loadSurveyMetadata(surveyId: SurveyId, userId: UserId): Pr
const surveys = await db.select() const surveys = await db.select()
.from(surveyPermissionsTable) .from(surveyPermissionsTable)
.innerJoin(surveysTable, eq(surveysTable.id, surveyPermissionsTable.surveyId)) .innerJoin(surveysTable, eq(surveysTable.id, surveyPermissionsTable.surveyId))
.where(and(eq(surveysTable.id, surveyId), eq(surveyPermissionsTable.user, userId))).limit(1); .where(and(eq(surveysTable.id, surveyId),
or(eq(surveyPermissionsTable.user, userId), isNull(surveyPermissionsTable.user)))).limit(1);
if (surveys.length === 0) { if (surveys.length === 0) {
return null; return null;