fix(contributors): add dash to prevent deleting permissions from other podcast

fixes #310
This commit is contained in:
Yassine Doghri 2023-03-17 16:34:44 +00:00
commit 5d2a2d49c4
2 changed files with 4 additions and 4 deletions

View file

@ -35,7 +35,7 @@ class UserModel extends ShieldUserModel
{
return $this->select('users.*')
->join('auth_groups_users', 'users.id = auth_groups_users.user_id')
->like('auth_groups_users.group', "podcast#{$podcastId}")
->like('auth_groups_users.group', "podcast#{$podcastId}-")
->findAll();
}
@ -44,7 +44,7 @@ class UserModel extends ShieldUserModel
return $this->select('users.*')
->join('auth_groups_users', 'users.id = auth_groups_users.user_id')
->where('users.id', $contributorId)
->like('auth_groups_users.group', "podcast#{$podcastId}")
->like('auth_groups_users.group', "podcast#{$podcastId}-")
->first();
}
}