From 4cc37397c2e56a97e6b1173735da78824c7b15e5 Mon Sep 17 00:00:00 2001 From: Meier Lukas Date: Tue, 18 Mar 2025 20:34:38 +0100 Subject: [PATCH] fix(permissions): unable to edit board with full board permissions (#2625) --- packages/auth/permissions/board-permissions.ts | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/packages/auth/permissions/board-permissions.ts b/packages/auth/permissions/board-permissions.ts index c59d56a3e..6d5591cf2 100644 --- a/packages/auth/permissions/board-permissions.ts +++ b/packages/auth/permissions/board-permissions.ts @@ -25,11 +25,15 @@ export const constructBoardPermissions = (board: BoardPermissionsProps, session: const creatorId = "creator" in board ? board.creator?.id : board.creatorId; return { - hasFullAccess: session?.user.id === creatorId || (session?.user.permissions.includes("board-full-all") ?? false), + hasFullAccess: + session?.user.id === creatorId || + board.userPermissions.some(({ permission }) => permission === "full") || + board.groupPermissions.some(({ permission }) => permission === "full") || + (session?.user.permissions.includes("board-full-all") ?? false), hasChangeAccess: session?.user.id === creatorId || - board.userPermissions.some(({ permission }) => permission === "modify") || - board.groupPermissions.some(({ permission }) => permission === "modify") || + board.userPermissions.some(({ permission }) => permission === "modify" || permission === "full") || + board.groupPermissions.some(({ permission }) => permission === "modify" || permission === "full") || (session?.user.permissions.includes("board-modify-all") ?? false) || (session?.user.permissions.includes("board-full-all") ?? false), hasViewAccess: