From 6f1d02dfad59c1b567e27cfd7d757110898d73eb Mon Sep 17 00:00:00 2001
From: Tom Moor <tom.moor@gmail.com>
Date: Thu, 1 Feb 2024 18:26:30 -0500
Subject: [PATCH] fix: Cannot import into parent document, regression from new
 permissions logic. closes #6471

---
 server/routes/api/documents/documents.ts | 11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/server/routes/api/documents/documents.ts b/server/routes/api/documents/documents.ts
index 5ace7b145..f47a6be0c 100644
--- a/server/routes/api/documents/documents.ts
+++ b/server/routes/api/documents/documents.ts
@@ -1334,16 +1334,11 @@ router.post(
     let parentDocument;
 
     if (parentDocumentId) {
-      parentDocument = await Document.findOne({
-        where: {
-          id: parentDocumentId,
-          collectionId: collection.id,
-        },
+      parentDocument = await Document.findByPk(parentDocumentId, {
+        userId: user.id,
         transaction,
       });
-      authorize(user, "read", parentDocument, {
-        collection,
-      });
+      authorize(user, "read", parentDocument);
     }
 
     const content = await fs.readFile(file.filepath);