danak/dzone-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: prohibit updating rent related field by user

Browse Source
This commit is contained in:
morteza-mortezai
2026-03-16 10:34:08 +03:30
parent 02a7979c6b
commit 0d81e62e8a
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/modules/companies/services/companies.service.ts
+2 -1
View File
@@ -288,7 +288,8 @@ export class CompaniesService {
const em = this.em.fork(); const em = this.em.fork();
try { try {
await em.begin(); await em.begin();
const { services, products, ...rest } = updateDto; // rental related field should not be update by user
const { services, products, isRented, rentEndAt, rentContractImages, ...rest } = updateDto;
const company = await em.findOne(Company, { id, business: { id: businessId }, user: { id: userId }, deletedAt: null }); const company = await em.findOne(Company, { id, business: { id: businessId }, user: { id: userId }, deletedAt: null });
if (!company) throw new BadRequestException(CompanyMessage.COMPANY_NOT_FOUND); if (!company) throw new BadRequestException(CompanyMessage.COMPANY_NOT_FOUND);