diff options
| -rw-r--r-- | packages/trpc/routers/tags.ts | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/packages/trpc/routers/tags.ts b/packages/trpc/routers/tags.ts index e76a09ec..a5d93213 100644 --- a/packages/trpc/routers/tags.ts +++ b/packages/trpc/routers/tags.ts @@ -107,7 +107,13 @@ export const tagsAppRouter = router({ bookmarkId: tagsOnBookmarks.bookmarkId, }) .from(tagsOnBookmarks) - .where(conditionFromInput(input, ctx.user.id)); + .where( + and( + eq(tagsOnBookmarks.tagId, input.tagId), + // Tag ownership is checked in the ensureTagOwnership middleware + // eq(bookmarkTags.userId, ctx.user.id), + ), + ); const res = await ctx.db .delete(bookmarkTags) |