mirror of
https://github.com/nocodb/nocodb.git
synced 2026-02-01 23:48:33 +00:00
Merge pull request #12732 from kolega-ai/nc-fix/notification-authorization-bypass
This commit is contained in:
@@ -150,7 +150,7 @@ export class NotificationsService implements OnModuleInit, OnModuleDestroy {
|
||||
body;
|
||||
user: UserType;
|
||||
}) {
|
||||
const notification = Notification.get({
|
||||
const notification = await Notification.get({
|
||||
id: param.notificationId,
|
||||
fk_user_id: param.user.id,
|
||||
});
|
||||
@@ -164,7 +164,7 @@ export class NotificationsService implements OnModuleInit, OnModuleDestroy {
|
||||
}
|
||||
|
||||
async notificationDelete(param: { notificationId: string; user: UserType }) {
|
||||
const notification = Notification.get({
|
||||
const notification = await Notification.get({
|
||||
id: param.notificationId,
|
||||
fk_user_id: param.user.id,
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user