From f6786945a04aac52d6f6e4c108463fd8eaea3b1e Mon Sep 17 00:00:00 2001
From: Tom Moor <tom.moor@gmail.com>
Date: Tue, 16 Apr 2024 20:02:11 -0400
Subject: [PATCH] fix: Missing scope on collection query

---
 plugins/slack/server/auth/slack.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/plugins/slack/server/auth/slack.ts b/plugins/slack/server/auth/slack.ts
index 5fc7285b7..f7e5b59ed 100644
--- a/plugins/slack/server/auth/slack.ts
+++ b/plugins/slack/server/auth/slack.ts
@@ -171,7 +171,9 @@ if (env.SLACK_CLIENT_ID && env.SLACK_CLIENT_SECRET) {
 
       switch (type) {
         case IntegrationType.Post: {
-          const collection = await Collection.findByPk(collectionId, {
+          const collection = await Collection.scope({
+            method: ["withMembership", user.id],
+          }).findByPk(collectionId, {
             rejectOnEmpty: true,
           });
           authorize(user, "read", collection);