fix: don't add write perms, users can only delete objects

This commit is contained in:
Huskydog9988
2025-04-10 19:50:04 -04:00
parent 35a2d98790
commit ca03be7f43
+1 -1
View File
@@ -64,7 +64,7 @@ export default defineEventHandler(async (h3) => {
profilePictureId, profilePictureId,
async () => jdenticon.toPng(user.username, 256), async () => jdenticon.toPng(user.username, 256),
{}, {},
[`internal:read`, `${userId}:write`] [`internal:read`, `${userId}:delete`]
); );
const [linkMec] = await prisma.$transaction([ const [linkMec] = await prisma.$transaction([
prisma.linkedAuthMec.create({ prisma.linkedAuthMec.create({