From d24dd54062f1f7a57e977f7aca28f7c5ce9a0b05 Mon Sep 17 00:00:00 2001 From: Chandler Copeland Date: Fri, 20 Mar 2026 10:44:21 -0600 Subject: [PATCH] fix(05-04): reject field updates when document status is not Draft --- .../src/app/api/documents/[id]/fields/route.ts | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/teressa-copeland-homes/src/app/api/documents/[id]/fields/route.ts b/teressa-copeland-homes/src/app/api/documents/[id]/fields/route.ts index a710477..7298782 100644 --- a/teressa-copeland-homes/src/app/api/documents/[id]/fields/route.ts +++ b/teressa-copeland-homes/src/app/api/documents/[id]/fields/route.ts @@ -26,6 +26,11 @@ export async function PUT( if (!session) return new Response('Unauthorized', { status: 401 }); const { id } = await params; + + const doc = await db.query.documents.findFirst({ where: eq(documents.id, id) }); + if (!doc) return Response.json({ error: 'Not found' }, { status: 404 }); + if (doc.status !== 'Draft') return Response.json({ error: 'Document is locked' }, { status: 403 }); + const fields: SignatureFieldData[] = await req.json(); const [updated] = await db