fix: issue-2956 (#2957)

2022-01-19 18:24:25 -08:00
parent 8bced69828
commit 266f8c96c4
5 changed files with 9 additions and 3 deletions
--- a/server/policies/share.ts
+++ b/server/policies/share.ts
@@ -10,6 +10,7 @@ allow(User, "update", Share, (user, share) => {

  // only the user who can share the document publicly can update the share.
  if (cannot(user, "share", share.document)) return false;
+
  return user.teamId === share.teamId;
 });