chihlasm/resolutionflow
1
0
Fork 0
Code Issues 23 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: shared filter returns all when user has no team

Browse Source 
When user.team_id is None, `WHERE team_id == None` matches all
personal templates. Return empty set instead when user has no team.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
chihlasm
2026-03-27 19:58:04 +00:00
parent c3f0370964
commit 1425b843a9
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
backend/app/api/endpoints/scripts.py
View File

@@ -5,7 +5,7 @@ import re
from fastapi import APIRouter, Depends, HTTPException, Query, status from fastapi import APIRouter, Depends, HTTPException, Query, status
from sqlalchemy.ext.asyncio import AsyncSession from sqlalchemy.ext.asyncio import AsyncSession
from sqlalchemy import select, func, or_ from sqlalchemy import select, func, or_, literal
from app.core.database import get_db from app.core.database import get_db
from app.api.deps import get_current_active_user from app.api.deps import get_current_active_user
@@ -122,7 +122,10 @@ async def list_templates(
query = query.where(ScriptTemplate.created_by == current_user.id) query = query.where(ScriptTemplate.created_by == current_user.id)
if shared: if shared:
query = query.where(ScriptTemplate.team_id == current_user.team_id) if current_user.team_id is None:
query = query.where(literal(False))
else:
query = query.where(ScriptTemplate.team_id == current_user.team_id)
result = await db.execute(query.order_by(ScriptTemplate.name)) result = await db.execute(query.order_by(ScriptTemplate.name))
templates = result.scalars().all() templates = result.scalars().all()