feat: Replace owner checks with scope checks (no-changelog) (#7846)
Github issue / Community forum post (link here to close automatically):
This commit is contained in:
@@ -37,8 +37,9 @@ export class WorkflowStatisticsController {
|
||||
const workflowId = req.params.id;
|
||||
const allowed = await this.sharedWorkflowRepository.exist({
|
||||
relations: ['workflow'],
|
||||
where: whereClause({
|
||||
where: await whereClause({
|
||||
user,
|
||||
globalScope: 'workflow:read',
|
||||
entityType: 'workflow',
|
||||
entityId: workflowId,
|
||||
}),
|
||||
|
||||
Reference in New Issue
Block a user