Add vault-level access control

2025-03-29 12:25:15 +00:00 · 2025-03-29 12:25:15 +00:00 · b3e98d32b6
commit b3e98d32b6
parent a8c813b9a7
17 changed files with 86 additions and 41 deletions
--- a/backend/sync_server/src/server/update_document.rs
+++ b/backend/sync_server/src/server/update_document.rs
@ -92,7 +92,7 @@ async fn internal_update_document(
    relative_path: String,
    content: Vec<u8>,
 ) -> Result<Json<DocumentUpdateResponse>, SyncServerError> {
-    auth(&state, auth_header.token())?;
+    auth(&state, auth_header.token(), &vault_id)?;

    // No need for a transaction as document versions are immutable
    let parent_document = state