fix(server): blob read should not require write scope (#4610)

2025-04-25 18:47:36 +03:00
parent fcd0bdf239
commit e18f1a6eb5
1 changed files with 1 additions and 1 deletions
@@ -373,7 +373,7 @@ export const streamCommentsWritePermissionsPipelineFactory =
  ]

 export const streamReadPermissionsPipelineFactory = (): AuthPipelineFunction[] => [
-  validateScope({ requiredScope: Scopes.Streams.Write }),
+  validateScope({ requiredScope: Scopes.Streams.Read }),
  validateStreamPolicyAccessFactory({
    policyInvoker: async ({ authData, policies }) =>
      policies.project.canRead({