feat: add moderation center for reports and ratings with user cleanup cron job
This commit is contained in:
@@ -36,7 +36,7 @@ export async function POST(
|
||||
}
|
||||
|
||||
// 2. Security: Only the owner of the business can reply
|
||||
if (rating.business.ownerId !== userId) {
|
||||
if (!rating.business || rating.business.ownerId !== userId) {
|
||||
return NextResponse.json({ error: 'Action non autorisée. Seul l\'entrepreneur concerné peut répondre.' }, { status: 403 });
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user