fixes

Author: atharvadeosthale

src/routes/blog/post/uber-clone-nextjs-appwrite/+page.markdoc

@@ -416,6 +416,14 @@ When a driver accepts a ride, two drivers could try to accept the same ride at t
 export async function acceptRideAction(rideId: string, driverId: string) {
   const tablesDB = getAdminClient();
 
+  // Read the ride to get the riderId for scoped permissions
+  const current = await tablesDB.getRow({
+    databaseId: DATABASE_ID,
+    tableId: RIDES_TABLE_ID,
+    rowId: rideId,
+  });
+  const riderId = current.riderId as string;
+
   // Use a transaction to prevent two drivers accepting the same ride
   const tx = await tablesDB.createTransaction();
 
@@ -427,10 +435,9 @@ export async function acceptRideAction(rideId: string, driverId: string) {
       rowId: rideId,
       data: { driverId, status: 'accepted' },
       permissions: [
-        Permission.read(Role.user(driverId)),
-        Permission.update(Role.user(driverId)),
         Permission.read(Role.users()),
-        Permission.update(Role.users()),
+        Permission.update(Role.user(riderId)),
+        Permission.update(Role.user(driverId)),
       ],
       transactionId: tx.$id,
     });