From 1c102ca34bf07fdfc5abbfa13403e4efb074ec7a Mon Sep 17 00:00:00 2001 From: cryppadotta <34892728+cryppadotta@users.noreply.github.com> Date: Thu, 10 Sep 2026 18:12:35 +0000 Subject: [PATCH] fix(auth): accept typed membership roles Co-Authored-By: Paperclip --- server/src/security/board-key-owner-authority.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/src/security/board-key-owner-authority.ts b/server/src/security/board-key-owner-authority.ts index 391ac5aec7..9927f7d730 100644 --- a/server/src/security/board-key-owner-authority.ts +++ b/server/src/security/board-key-owner-authority.ts @@ -127,7 +127,7 @@ export async function ownerHasRequiredGrant( const rolesByCompany = new Map(rows.map((row) => [row.companyId, row.membershipRole])); return companyIds.every((companyId) => { const role = rolesByCompany.get(companyId); - return typeof role === "string" && requirement.roles.includes(role); + return typeof role === "string" && requirement.roles.some((allowedRole) => allowedRole === role); }); } const { permissionKeys } = requirement;