diff --git a/packages/nocodb/src/controllers/calendars.controller.ts b/packages/nocodb/src/controllers/calendars.controller.ts index 5a9d2df082..e8d1df52ac 100644 --- a/packages/nocodb/src/controllers/calendars.controller.ts +++ b/packages/nocodb/src/controllers/calendars.controller.ts @@ -25,8 +25,7 @@ export class CalendarsController { '/api/v1/db/meta/calendars/:calendarViewId', '/api/v2/meta/calendars/:calendarViewId', ]) - // #TODO Enable ACL Later - // @Acl('calendarViewGet') + @Acl('calendarViewGet') async calendarViewGet(@Param('calendarViewId') calendarViewId: string) { return await this.calendarsService.calendarViewGet({ calendarViewId, @@ -38,8 +37,7 @@ export class CalendarsController { '/api/v2/meta/tables/:tableId/calendars', ]) @HttpCode(200) - // #TODO Enable ACL Later - // @Acl('calendarViewCreate') + @Acl('calendarViewCreate') async calendarViewCreate( @Param('tableId') tableId: string, @Body() body: ViewCreateReqType, @@ -57,8 +55,7 @@ export class CalendarsController { '/api/v1/db/meta/calendars/:calendarViewId', '/api/v2/meta/calendars/:calendarViewId', ]) - // #TODO Enable ACL Later - // @Acl('calendarViewUpdate') + @Acl('calendarViewUpdate') async calendarViewUpdate( @Param('calendarViewId') calendarViewId: string, @Body() body, diff --git a/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts b/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts index 34ac965b02..12cdef3be0 100644 --- a/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts +++ b/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts @@ -81,13 +81,15 @@ export class ExtractIdsMiddleware implements NestMiddleware, CanActivate { params.formViewId || params.gridViewId || params.kanbanViewId || - params.galleryViewId + params.galleryViewId || + params.calendarViewId ) { const view = await View.get( params.formViewId || params.gridViewId || params.kanbanViewId || - params.galleryViewId, + params.galleryViewId || + params.calendarViewId, ); req.ncBaseId = view?.base_id; } else if (params.publicDataUuid) {