diff --git a/ondeck/src/app/api/tasks/route.ts b/ondeck/src/app/api/tasks/route.ts index be2f3b9..87922b5 100644 --- a/ondeck/src/app/api/tasks/route.ts +++ b/ondeck/src/app/api/tasks/route.ts @@ -81,7 +81,8 @@ export async function GET(request: NextRequest) { } if (viewUserId) { const userRoles = (session.user as any).roles || [] - if (!userRoles.includes('Admin') && !userRoles.includes('Manager')) { + const isSelf = viewUserId === (session.user as any).id + if (!isSelf && !userRoles.includes('Admin') && !userRoles.includes('Manager')) { return NextResponse.json({ error: 'Forbidden' }, { status: 403 }) } where.assignments = { some: { userId: viewUserId } }