Change permission acction on POST snapshot endpoint

mlanlazc · mlanlazc · commit ddbba9f395fe · 2025-09-26T12:40:38.000+02:00
diff --git a/app/api/conversations/[conversationId]/snapshots/route.ts b/app/api/conversations/[conversationId]/snapshots/route.ts
@@ -25,7 +25,7 @@ export async function POST(request: NextRequest, { params }: { params: Promise<{
     return NextResponse.json({ error: 'Conversation not found' }, { status: 404 });
   }
 
-  if (userAbility.cannot(PermissionAction.create, subject('Conversation', conversation))) {
+  if (userAbility.cannot(PermissionAction.update, subject('Conversation', conversation))) {
     return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 });
   }
 

Original file line number	Diff line number	Diff line change
`@@ -25,7 +25,7 @@ export async function POST(request: NextRequest, { params }: { params: Promise<{`
`25`	`25`	`return NextResponse.json({ error: 'Conversation not found' }, { status: 404 });`
`26`	`26`	`}`
`27`	`27`
`28`		`- if (userAbility.cannot(PermissionAction.create, subject('Conversation', conversation))) {`
	`28`	`+ if (userAbility.cannot(PermissionAction.update, subject('Conversation', conversation))) {`
`29`	`29`	`return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 });`
`30`	`30`	`}`
`31`	`31`