🐛 fix: Update deletePromptController to include user role in query (#5488)

This commit is contained in:
Danny Avila
2025-01-26 19:03:12 -05:00
committed by GitHub
parent 8b31f255f5
commit 12a9a07eb0

View File

@@ -214,10 +214,7 @@ const deletePromptController = async (req, res) => {
const { promptId } = req.params;
const { groupId } = req.query;
const author = req.user.id;
const query = { promptId, groupId, author };
if (req.user.role === SystemRoles.ADMIN) {
delete query.author;
}
const query = { promptId, groupId, author, role: req.user.role };
const result = await deletePrompt(query);
res.status(200).send(result);
} catch (error) {