From 6a3751d8862712d2035922b83019933b092f1733 Mon Sep 17 00:00:00 2001
From: Pranav C <pranavxc@gmail.com>
Date: Sat, 16 Apr 2022 17:00:41 +0530
Subject: [PATCH] fix: allow editor user to add/remove nested record

Signed-off-by: Pranav C <pranavxc@gmail.com>
---
 .../src/lib/noco/meta/api/dataApis/dataAliasNestedApis.ts     | 4 ++--
 packages/nocodb/src/lib/utils/projectAcl.ts                   | 4 +++-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/packages/nocodb/src/lib/noco/meta/api/dataApis/dataAliasNestedApis.ts b/packages/nocodb/src/lib/noco/meta/api/dataApis/dataAliasNestedApis.ts
index e8641fe556..e68288d0e9 100644
--- a/packages/nocodb/src/lib/noco/meta/api/dataApis/dataAliasNestedApis.ts
+++ b/packages/nocodb/src/lib/noco/meta/api/dataApis/dataAliasNestedApis.ts
@@ -191,7 +191,7 @@ export async function hmList(req: Request, res: Response, next) {
 }
 
 //@ts-ignore
-async function relationDataDelete(req, res) {
+async function relationDataRemove(req, res) {
   const { model, view } = await getViewAndModelFromRequestByAliasOrId(req);
 
   if (!model) NcError.notFound('Table not found');
@@ -273,7 +273,7 @@ router.post(
 );
 router.delete(
   '/api/v1/db/data/:orgs/:projectName/:tableName/:rowId/:relationType/:columnName/:refRowId',
-  ncMetaAclMw(relationDataDelete, 'relationDataDelete')
+  ncMetaAclMw(relationDataRemove, 'relationDataRemove')
 );
 
 router.get(
diff --git a/packages/nocodb/src/lib/utils/projectAcl.ts b/packages/nocodb/src/lib/utils/projectAcl.ts
index 59e15758b2..068694b6be 100644
--- a/packages/nocodb/src/lib/utils/projectAcl.ts
+++ b/packages/nocodb/src/lib/utils/projectAcl.ts
@@ -122,7 +122,9 @@ export default {
     bulkDataUpdate: true,
     bulkDataUpdateAll: true,
     bulkDataDelete: true,
-    bulkDataDeleteAll: true
+    bulkDataDeleteAll: true,
+    relationDataRemove: true,
+    relationDataAdd: true
   },
   commenter: {
     formViewGet: true,