fix(blueprint): require planning access for detailed reads
This commit is contained in:
@@ -18,7 +18,7 @@ export const blueprintRouter = createTRPCRouter({
|
||||
});
|
||||
}),
|
||||
|
||||
list: protectedProcedure
|
||||
list: planningReadProcedure
|
||||
.input(
|
||||
z.object({
|
||||
target: z.nativeEnum(BlueprintTarget).optional(),
|
||||
@@ -35,7 +35,7 @@ export const blueprintRouter = createTRPCRouter({
|
||||
});
|
||||
}),
|
||||
|
||||
getById: protectedProcedure
|
||||
getById: planningReadProcedure
|
||||
.input(z.object({ id: z.string() }))
|
||||
.query(async ({ ctx, input }) => {
|
||||
const blueprint = await findUniqueOrThrow(
|
||||
@@ -82,7 +82,7 @@ export const blueprintRouter = createTRPCRouter({
|
||||
return blueprint;
|
||||
}),
|
||||
|
||||
getByIdentifier: protectedProcedure
|
||||
getByIdentifier: planningReadProcedure
|
||||
.input(z.object({ identifier: z.string().trim().min(1) }))
|
||||
.query(async ({ ctx, input }) => {
|
||||
const identifier = input.identifier.trim();
|
||||
|
||||
Reference in New Issue
Block a user