From 111c154ae39abc79f264629310c6e058941b493f Mon Sep 17 00:00:00 2001
From: Christian Kellner <weakmap@gmail.com>
Date: Wed, 4 Jun 2025 09:15:36 +0200
Subject: [PATCH] Fix job ownership verification (#132)

---
 lib/api/routes/jobRouter.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/api/routes/jobRouter.js b/lib/api/routes/jobRouter.js
index 6b6f6a6..077aa48 100644
--- a/lib/api/routes/jobRouter.js
+++ b/lib/api/routes/jobRouter.js
@@ -15,7 +15,7 @@ function doesJobBelongsToUser(job, req) {
   if (user == null) {
     return false;
   }
-  return user.isAdmin || job.userId === job.userId;
+  return user.isAdmin || job.userId === user.id;
 }
 jobRouter.get('/', async (req, res) => {
   const isUserAdmin = isAdmin(req);