fix(05-04): reject field updates when document status is not Draft
This commit is contained in:
@@ -26,6 +26,11 @@ export async function PUT(
|
|||||||
if (!session) return new Response('Unauthorized', { status: 401 });
|
if (!session) return new Response('Unauthorized', { status: 401 });
|
||||||
|
|
||||||
const { id } = await params;
|
const { id } = await params;
|
||||||
|
|
||||||
|
const doc = await db.query.documents.findFirst({ where: eq(documents.id, id) });
|
||||||
|
if (!doc) return Response.json({ error: 'Not found' }, { status: 404 });
|
||||||
|
if (doc.status !== 'Draft') return Response.json({ error: 'Document is locked' }, { status: 403 });
|
||||||
|
|
||||||
const fields: SignatureFieldData[] = await req.json();
|
const fields: SignatureFieldData[] = await req.json();
|
||||||
|
|
||||||
const [updated] = await db
|
const [updated] = await db
|
||||||
|
|||||||
Reference in New Issue
Block a user