🐛 fix: Update deletePromptController to include user role in query (#5488)

This commit is contained in:
Danny Avila 2025-01-26 19:03:12 -05:00 committed by GitHub
parent 8b31f255f5
commit 12a9a07eb0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -214,10 +214,7 @@ const deletePromptController = async (req, res) => {
const { promptId } = req.params;
const { groupId } = req.query;
const author = req.user.id;
const query = { promptId, groupId, author };
if (req.user.role === SystemRoles.ADMIN) {
delete query.author;
}
const query = { promptId, groupId, author, role: req.user.role };
const result = await deletePrompt(query);
res.status(200).send(result);
} catch (error) {