Restore data team access to uploads

2023-10-19 16:49:27 -04:00
parent 188275aa7b
commit 1a7c4a27fa
2 changed files with 5 additions and 1 deletions
--- a/functions/api/uploads/_middleware.ts
+++ b/functions/api/uploads/_middleware.ts
@ -1,7 +1,10 @@
 export async function onRequest(context: RequestContext) {
  const { current_user: currentUser } = context.data;

-  if (!(currentUser?.permissions & (1 << 5)))
+  if (
+    !(currentUser?.permissions & (1 << 5)) ||
+    !(currentUser?.permissions & (1 << 12))
+  )
    return new Response('{"error":"Forbidden"}', {
      headers: {
        "content-type": "application/json",