From 0d81e62e8a2c48537076dbd710096e642f6eb910 Mon Sep 17 00:00:00 2001 From: morteza-mortezai Date: Mon, 16 Mar 2026 10:34:08 +0330 Subject: [PATCH] fix: prohibit updating rent related field by user --- src/modules/companies/services/companies.service.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/modules/companies/services/companies.service.ts b/src/modules/companies/services/companies.service.ts index 27a55d4..ab12771 100644 --- a/src/modules/companies/services/companies.service.ts +++ b/src/modules/companies/services/companies.service.ts @@ -288,7 +288,8 @@ export class CompaniesService { const em = this.em.fork(); try { await em.begin(); - const { services, products, ...rest } = updateDto; + // rental related field should not be update by user + const { services, products, isRented, rentEndAt, rentContractImages, ...rest } = updateDto; const company = await em.findOne(Company, { id, business: { id: businessId }, user: { id: userId }, deletedAt: null }); if (!company) throw new BadRequestException(CompanyMessage.COMPANY_NOT_FOUND);