diff --git a/backend/src/middleware/auth/checks/submission-checks.ts b/backend/src/middleware/auth/checks/submission-checks.ts index 6c7969e0..bd895aec 100644 --- a/backend/src/middleware/auth/checks/submission-checks.ts +++ b/backend/src/middleware/auth/checks/submission-checks.ts @@ -40,6 +40,6 @@ export const onlyAllowIfHasAccessToSubmissionFromParams = authorize(async (auth: return cls.teachers.map(mapToUsername).includes(auth.username); } - const group = await fetchGroup(classId as string, +(assignmentId as string), +(groupId as string)); + const group = await fetchGroup(classId as string, Number(assignmentId as string), Number(groupId as string)); return group.members.map(mapToUsername).includes(auth.username); }); \ No newline at end of file diff --git a/backend/src/routes/submissions.ts b/backend/src/routes/submissions.ts index 7dfa80f3..31f71381 100644 --- a/backend/src/routes/submissions.ts +++ b/backend/src/routes/submissions.ts @@ -1,7 +1,7 @@ import express from 'express'; import { createSubmissionHandler, deleteSubmissionHandler, getSubmissionHandler, getSubmissionsHandler } from '../controllers/submissions.js'; import { onlyAllowIfHasAccessToSubmission, onlyAllowIfHasAccessToSubmissionFromParams, onlyAllowSubmitter } from '../middleware/auth/checks/submission-checks.js'; -import { adminOnly, studentsOnly } from '../middleware/auth/checks/auth-checks.js'; +import { studentsOnly } from '../middleware/auth/checks/auth-checks.js'; const router = express.Router({ mergeParams: true }); router.get('/', onlyAllowIfHasAccessToSubmissionFromParams, getSubmissionsHandler);