Add a missing provider type check

espoon-voltti · Dec 19, 2024 · 67c1904 · 67c1904
1 parent 9b4bccc
commit 67c1904
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/service/src/main/kotlin/fi/espoo/evaka/daycare/controllers/UnitAclController.kt b/service/src/main/kotlin/fi/espoo/evaka/daycare/controllers/UnitAclController.kt
@@ -620,10 +620,10 @@ class UnitAclController(
     ) {
         db.transaction { tx ->
             if (
-                !tx.hasRoleInAnyUnitWithProviderType(
+                !tx.hasRoleInAnyUnitWithProviderTypes(
                     job.employeeId,
                     UserRole.UNIT_SUPERVISOR,
-                    ProviderType.MUNICIPAL,
+                    setOf(ProviderType.MUNICIPAL, ProviderType.MUNICIPAL_SCHOOL),
                 )
             ) {
                 tx.deletePersonalDevices(job.employeeId)

diff --git a/service/src/main/kotlin/fi/espoo/evaka/shared/auth/AclQueries.kt b/service/src/main/kotlin/fi/espoo/evaka/shared/auth/AclQueries.kt
@@ -74,10 +74,10 @@ fun Database.Read.hasAnyDaycareAclRow(employeeId: EmployeeId): Boolean =
         }
         .exactlyOne<Boolean>()
 
-fun Database.Read.hasRoleInAnyUnitWithProviderType(
+fun Database.Read.hasRoleInAnyUnitWithProviderTypes(
     employeeId: EmployeeId,
     role: UserRole,
-    providerType: ProviderType,
+    providerTypes: Set<ProviderType>,
 ): Boolean =
     createQuery {
             sql(
@@ -88,7 +88,7 @@ SELECT EXISTS (
     WHERE
         acl.employee_id = ${bind(employeeId)} AND
         acl.role = ${bind(role)} AND
-        d.provider_type = ${bind(providerType)}
+        d.provider_type = ANY (${bind(providerTypes)})
 )
 """
             )