From f6152781890791c4cfa05cc16c9aa36809cc07d7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Carl-Gerhard=20Lindesva=CC=88rd?= <lindesvard@gmail.com>
Date: Mon, 24 Jun 2024 22:04:37 +0200
Subject: [PATCH] check share overview before throwing access error

---
 packages/trpc/src/routers/chart.ts | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/packages/trpc/src/routers/chart.ts b/packages/trpc/src/routers/chart.ts
index 8d1bafa8..707bdea0 100644
--- a/packages/trpc/src/routers/chart.ts
+++ b/packages/trpc/src/routers/chart.ts
@@ -159,7 +159,15 @@ export const chartRouter = createTRPCRouter({
         userId: ctx.session.userId,
       });
       if (!access) {
-        throw TRPCAccessError('You do not have access to this project');
+        const share = await db.shareOverview.findFirst({
+          where: {
+            projectId: input.projectId,
+          },
+        });
+
+        if (!share) {
+          throw TRPCAccessError('You do not have access to this project');
+        }
       }
     } else {
       const share = await db.shareOverview.findFirst({