fix: prevent cross-tenant comment deletion and edit

2026-06-25 17:11:08 +01:00
parent 6e1d821b35
commit a994c061ac
2 changed files with 30 additions and 18 deletions
--- a/packages/db/src/repository/cardComment.repo.ts
+++ b/packages/db/src/repository/cardComment.repo.ts
@@ -45,6 +45,7 @@ export const getByPublicId = (db: dbClient, publicId: string) => {
      publicId: true,
      comment: true,
      createdBy: true,
+      cardId: true,
    },
    where: eq(comments.publicId, publicId),
  });