auth updating note id

2023-12-19 12:31:24 -06:00 · 2023-12-19 12:31:24 -06:00 · efd48afd61
parent 5737027c0f
commit efd48afd61
1 changed files with 2 additions and 2 deletions
--- a/api/resolvers/item.js
+++ b/api/resolvers/item.js
@ -724,13 +724,13 @@ export default {
        return item
      }
    },
-    updateNoteId: async (parent, { id, noteId }, { models }) => {
+    updateNoteId: async (parent, { id, noteId }, { me, models }) => {
      if (!id) {
        throw new GraphQLError('id required', { extensions: { code: 'BAD_INPUT' } })
      }

      await models.item.update({
-        where: { id: Number(id) },
+        where: { id: Number(id), userId: Number(me.id) },
        data: { noteId }
      })