fix: updateInsights policy missing

2024-05-17 17:04:10 -04:00
parent 2d510aaf4e
commit d36332273e
1 changed files with 1 additions and 1 deletions
--- a/server/policies/document.ts
+++ b/server/policies/document.ts
@@ -130,7 +130,7 @@ allow(User, "createChildDocument", Document, (actor, document) =>
  )
 );

-allow(User, ["pin", "unpin"], Document, (actor, document) =>
+allow(User, ["updateInsights", "pin", "unpin"], Document, (actor, document) =>
  and(
    can(actor, "update", document),
    can(actor, "update", document?.collection),