From 90c0ef481b03bfb7d1a822dfa9e667f59f2c27b2 Mon Sep 17 00:00:00 2001
From: vchikalkin <djchikalkin@gmail.com>
Date: Wed, 29 Mar 2023 15:10:34 +0300
Subject: [PATCH] trpc: check unlimited in middleware

---
 apps/web/server/middleware.ts | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/apps/web/server/middleware.ts b/apps/web/server/middleware.ts
index fedce85..7347334 100644
--- a/apps/web/server/middleware.ts
+++ b/apps/web/server/middleware.ts
@@ -25,9 +25,17 @@ export const userMiddleware = t.middleware(async ({ ctx, next }) => {
     },
   });
 
+  const unlimited = systemuser?.roles?.some((x) => x?.name && unlimitedRoles.includes(x.name));
+
+  if (!unlimited) {
+    throw new TRPCError({
+      code: 'UNAUTHORIZED',
+    });
+  }
+
   return next({
     ctx: {
-      unlimited: systemuser?.roles?.some((x) => x?.name && unlimitedRoles.includes(x.name)),
+      unlimited,
     },
   });
 });