Additional policy regarding comments on a document (#5130)

* feat: comment policy on document * fix: add alongside read
2023-04-02 19:21:13 +05:30
parent 1be1371171
commit 16a5be1aa6
3 changed files with 7 additions and 2 deletions
--- a/server/routes/api/comments/comments.ts
+++ b/server/routes/api/comments/comments.ts
@@ -29,7 +29,7 @@ router.post(
      userId: user.id,
      transaction,
    });
-    authorize(user, "read", document);
+    authorize(user, "comment", document);

    const comment = await commentCreator({
      id,