Andreas/LibreChat
1
0
Fork 0
mirror of https://github.com/danny-avila/LibreChat.git synced 2025-12-17 08:50:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

🐛 fix: Update deletePromptController to include user role in query (#5488)

Browse source
This commit is contained in:
Danny Avila 2025-01-26 19:03:12 -05:00 • committed by GitHub
parent 8b31f255f5
commit 12a9a07eb0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
api/server/routes/prompts.js
View file

@ -214,10 +214,7 @@ const deletePromptController = async (req, res) => {
const { promptId } = req.params; const { promptId } = req.params;
const { groupId } = req.query; const { groupId } = req.query;
const author = req.user.id; const author = req.user.id;
const query = { promptId, groupId, author }; const query = { promptId, groupId, author, role: req.user.role };
if (req.user.role === SystemRoles.ADMIN) {
delete query.author;
}
const result = await deletePrompt(query); const result = await deletePrompt(query);
res.status(200).send(result); res.status(200).send(result);
} catch (error) { } catch (error) {