From 2402b7cbc879e84ec4a46a2819ea99f9112bb4da Mon Sep 17 00:00:00 2001 From: BOHA Date: Sat, 28 Mar 2026 09:03:05 +0100 Subject: [PATCH] =?UTF-8?q?fix:=20"Moje=20=C5=BE=C3=A1dosti"=20page=20show?= =?UTF-8?q?s=20only=20current=20user's=20requests?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Admins were seeing all requests on their own requests page. Added mine=1 param to force user_id filter regardless of role. Co-Authored-By: Claude Opus 4.6 (1M context) --- src/admin/pages/LeaveRequests.tsx | 2 +- src/routes/admin/leave-requests.ts | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/admin/pages/LeaveRequests.tsx b/src/admin/pages/LeaveRequests.tsx index cdbb7e2..e2fef8c 100644 --- a/src/admin/pages/LeaveRequests.tsx +++ b/src/admin/pages/LeaveRequests.tsx @@ -61,7 +61,7 @@ export default function LeaveRequests() { const fetchRequests = useCallback(async () => { try { - const response = await apiFetch(`${API_BASE}/leave-requests`); + const response = await apiFetch(`${API_BASE}/leave-requests?mine=1`); if (response.status === 401) return; const result = await response.json(); if (result.success) { diff --git a/src/routes/admin/leave-requests.ts b/src/routes/admin/leave-requests.ts index 02b45a4..a56f1fd 100644 --- a/src/routes/admin/leave-requests.ts +++ b/src/routes/admin/leave-requests.ts @@ -29,7 +29,7 @@ export default async function leaveRequestsRoutes( const isAdmin = authData.permissions.includes("attendance.approve"); const where: Record = {}; - if (!isAdmin) where.user_id = authData.userId; + if (!isAdmin || query.mine === "1") where.user_id = authData.userId; else if (query.user_id) where.user_id = Number(query.user_id); if (query.status) where.status = String(query.status);