Merge pull request #12732 from kolega-ai/nc-fix/notification-authorization-bypass

This commit is contained in:
Anbarasu
2025-12-13 10:04:02 +05:30
committed by GitHub

View File

@@ -150,7 +150,7 @@ export class NotificationsService implements OnModuleInit, OnModuleDestroy {
body;
user: UserType;
}) {
const notification = Notification.get({
const notification = await Notification.get({
id: param.notificationId,
fk_user_id: param.user.id,
});
@@ -164,7 +164,7 @@ export class NotificationsService implements OnModuleInit, OnModuleDestroy {
}
async notificationDelete(param: { notificationId: string; user: UserType }) {
const notification = Notification.get({
const notification = await Notification.get({
id: param.notificationId,
fk_user_id: param.user.id,
});