From 45ec1a4c4723fca36faa49ea68e7bc7c4168cc4f Mon Sep 17 00:00:00 2001
From: kolaente <k@knt.li>
Date: Fri, 17 Jan 2025 11:06:00 +0100
Subject: [PATCH] fix(auth): make sure routes from the "other" group work as
 intended

Resolves
https://kolaente.dev/vikunja/vikunja/issues/2977
---
 pkg/models/api_routes.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkg/models/api_routes.go b/pkg/models/api_routes.go
index 18a09e2a6..10486cf1f 100644
--- a/pkg/models/api_routes.go
+++ b/pkg/models/api_routes.go
@@ -229,7 +229,10 @@ func CanDoAPIRoute(c echo.Context, token *APIToken) (can bool) {
 
 	routeGroupName = strings.TrimSuffix(routeGroupName, "_bulk")
 
-	if routeGroupName == "user" {
+	if routeGroupName == "user" ||
+		routeGroupName == "users" ||
+		routeGroupName == "notifications" ||
+		routeGroupName == "routes" {
 		routeGroupName = "other"
 	}