From 0c06c51c85c0ac2ae027c4a3db6448c5da002c80 Mon Sep 17 00:00:00 2001 From: Zachary Blasczyk <77289967+zacharyblasczyk@users.noreply.github.com> Date: Sat, 19 Oct 2024 10:12:33 -0500 Subject: [PATCH] fix: Allow viewer role to access the settings/workspace/members route (#147) --- packages/api/src/router/workspace-security.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/api/src/router/workspace-security.ts b/packages/api/src/router/workspace-security.ts index a47ea09db..1db2afbb5 100644 --- a/packages/api/src/router/workspace-security.ts +++ b/packages/api/src/router/workspace-security.ts @@ -18,7 +18,7 @@ export const workspaceEmailDomainMatchingRouter = createTRPCRouter({ .meta({ authorizationCheck: ({ canUser, input }) => canUser - .perform(Permission.WorkspaceUpdate) + .perform(Permission.WorkspaceListMembers) .on({ type: "workspace", id: input }), }) .input(z.string().uuid())