fix(server): validate duplicate group ownership before dismissal (#28221)

This commit is contained in:
Timon
2026-05-04 12:51:54 +02:00
committed by GitHub
parent 3decc864b5
commit d4f29ab6ac
7 changed files with 43 additions and 10 deletions
+2
View File
@@ -82,10 +82,12 @@ export class DuplicateService extends BaseService {
}
async delete(auth: AuthDto, id: string): Promise<void> {
await this.requireAccess({ auth, permission: Permission.DuplicateDelete, ids: [id] });
await this.duplicateRepository.delete(auth.user.id, id);
}
async deleteAll(auth: AuthDto, dto: BulkIdsDto) {
await this.requireAccess({ auth, permission: Permission.DuplicateDelete, ids: dto.ids });
await this.duplicateRepository.deleteAll(auth.user.id, dto.ids);
}