fix(auth): make sure routes from the "other" group work as intended

Resolves
https://kolaente.dev/vikunja/vikunja/issues/2977
This commit is contained in:
kolaente 2025-01-17 11:06:00 +01:00
parent 77d1616fea
commit 45ec1a4c47
No known key found for this signature in database
GPG Key ID: F40E70337AB24C9B
1 changed files with 4 additions and 1 deletions

View File

@ -229,7 +229,10 @@ func CanDoAPIRoute(c echo.Context, token *APIToken) (can bool) {
routeGroupName = strings.TrimSuffix(routeGroupName, "_bulk")
if routeGroupName == "user" {
if routeGroupName == "user" ||
routeGroupName == "users" ||
routeGroupName == "notifications" ||
routeGroupName == "routes" {
routeGroupName = "other"
}