pembatasan akses delete dari pengelola rumah ibadah dan fitur upload bukti penyerahan bantuan

2026-06-03 10:50:30 +07:00
parent 8393e05f96
commit 63c5d0a11f
5 changed files with 68 additions and 21 deletions
@@ -250,13 +250,10 @@ export const recipientRouter = createRouter({
      }

      if (ctx.user.role === "manager") {
-        const placeIds = await findPlaceIdsByManagerId(ctx.user.id);
-        if (!placeIds.includes(target.placeOfWorshipId)) {
-          throw new TRPCError({
-            code: "FORBIDDEN",
-            message: "Anda tidak berwenang menghapus data penerima ini.",
-          });
-        }
+        throw new TRPCError({
+          code: "FORBIDDEN",
+          message: "Pengelola rumah ibadah tidak berwenang menghapus data penerima.",
+        });
      }

      await deleteRecipient(input.id);