External/portabase
1
0
Fork 0
mirror of https://github.com/Portabase/portabase.git synced 2026-07-14 11:16:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: apply soft-delete filters consistently across api/v1 routes

Browse Source 
Four missed cases where deleted/archived resources could leak through:
- acl.ts: exclude deleted databases from getAccessibleDatabaseIds
- databases/route.ts: exclude deleted databases in list endpoint
- agents/route.ts: re-apply isArchived guard on final fetch (ACL ids stale)
- databases/[id]/status/route.ts: exclude deleted restorations
This commit is contained in:
charles-gauthereau
2026-05-25 15:29:33 +02:00
parent 274aded8fd
commit 685e1fc300
4 changed files with 21 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/api/v1/databases/[id]/status/route.ts
+4 -1
View File
@@ -35,7 +35,10 @@ export const GET = withApiKey(
orderBy: [desc(drizzleDb.schemas.backup.createdAt)],
}),
db.query.restoration.findFirst({
where: eq(drizzleDb.schemas.restoration.databaseId, id),
where: and(
eq(drizzleDb.schemas.restoration.databaseId, id),
isNull(drizzleDb.schemas.restoration.deletedAt)
),
orderBy: [desc(drizzleDb.schemas.restoration.createdAt)],
}),
]);