diff --git a/apps/api/src/controllers/v1/scrape-status.ts b/apps/api/src/controllers/v1/scrape-status.ts index 5ff16b8a..5e0aecb6 100644 --- a/apps/api/src/controllers/v1/scrape-status.ts +++ b/apps/api/src/controllers/v1/scrape-status.ts @@ -12,6 +12,12 @@ export async function scrapeStatusController(req: any, res: any) { const job = await supabaseGetJobByIdOnlyData(req.params.jobId); + if(job.team_id !== "41bdbfe1-0579-4d9b-b6d5-809f16be12f5"){ + return res.status(403).json({ + success: false, + error: "You are not allowed to access this resource.", + }); + } return res.status(200).json({ success: true, data: job?.docs[0], diff --git a/apps/api/src/lib/supabase-jobs.ts b/apps/api/src/lib/supabase-jobs.ts index 6c969fce..cda6fd46 100644 --- a/apps/api/src/lib/supabase-jobs.ts +++ b/apps/api/src/lib/supabase-jobs.ts @@ -42,7 +42,7 @@ export const supabaseGetJobsById = async (jobIds: string[]) => { export const supabaseGetJobByIdOnlyData = async (jobId: string) => { const { data, error } = await supabase_service .from("firecrawl_jobs") - .select("docs") + .select("docs, team_id") .eq("job_id", jobId) .single();