Correction: Check that the resource is in the right space

Author: maparent

apps/website/app/api/content/[space_id]/[resource_id]/route.ts

@@ -72,6 +72,7 @@ export const GET = async (
     .from("Concept")
     .select()
     .eq("id", resourceIdN)
+    .eq("space_id", spaceIdN)
     .maybeSingle();
   if (conceptResponse.error) {
     return createApiResponse(request, conceptResponse);

apps/website/app/api/data/[space_id]/[resource_id]/route.ts

@@ -66,6 +66,7 @@ export const GET = async (
     .from("Concept")
     .select()
     .eq("id", resourceIdN)
+    .eq("space_id", spaceIdN)
     .maybeSingle();
   if (conceptResponse.error) {
     return createApiResponse(request, conceptResponse);