From 2fcc07175f053abafa80db7cdec9bf7419f1a16e Mon Sep 17 00:00:00 2001 From: Richard Ward Date: Tue, 30 Dec 2025 22:57:26 +0000 Subject: [PATCH] code: operation,nextjs,frontends (1 files) --- .../src/lib/routing/auth/execute-dbal-operation.ts | 14 ++++---------- 1 file changed, 4 insertions(+), 10 deletions(-) diff --git a/frontends/nextjs/src/lib/routing/auth/execute-dbal-operation.ts b/frontends/nextjs/src/lib/routing/auth/execute-dbal-operation.ts index 5681b5836..55099208e 100644 --- a/frontends/nextjs/src/lib/routing/auth/execute-dbal-operation.ts +++ b/frontends/nextjs/src/lib/routing/auth/execute-dbal-operation.ts @@ -128,20 +128,14 @@ export const executeDbalOperation = async ( return { success: false, error: 'Record not found' } } - const updateData = { - ...payload, + // Build update data, excluding meta fields and protected fields + const { id, tenantId, filter, sort, page, limit, ...cleanPayload } = payload as Record + const updateData: Record = { + ...cleanPayload, updatedBy: user?.id, updatedAt: Date.now(), } - // Prevent changing tenant or ID - delete updateData.id - delete updateData.tenantId - delete updateData.filter - delete updateData.sort - delete updateData.page - delete updateData.limit - const updated = await adapter.update(dbalOp.entity, dbalOp.id, updateData) return { success: true, data: updated }