Merge branch 'release-2.19.5' into release

raclim · raclim · commit c302fe8633e7 · 2026-01-15T09:23:43.000-05:00
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "p5.js-web-editor",
-  "version": "2.19.4",
+  "version": "2.19.5",
   "description": "The web editor for p5.js.",
   "scripts": {
     "clean": "rimraf dist",
diff --git a/server/controllers/project.controller.js b/server/controllers/project.controller.js
@@ -296,6 +296,12 @@ export async function changeProjectVisibility(req, res) {
         .json({ success: false, message: 'No project found.' });
     }
 
+    if (!project.user.equals(req.user._id)) {
+      return res
+        .status(403)
+        .json({ success: false, message: 'Unauthorized action.' });
+    }
+
     if (newVisibility !== 'Private' && newVisibility !== 'Public') {
       return res.status(400).json({ success: false, message: 'Invalid data.' });
     }

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "p5.js-web-editor",`
`3`		`- "version": "2.19.4",`
	`3`	`+ "version": "2.19.5",`
`4`	`4`	`"description": "The web editor for p5.js.",`
`5`	`5`	`"scripts": {`
`6`	`6`	`"clean": "rimraf dist",`
Original file line number	Diff line number	Diff line change
`@@ -296,6 +296,12 @@ export async function changeProjectVisibility(req, res) {`
`296`	`296`	`.json({ success: false, message: 'No project found.' });`
`297`	`297`	`}`
`298`	`298`
	`299`	`+ if (!project.user.equals(req.user._id)) {`
	`300`	`+ return res`
	`301`	`+ .status(403)`
	`302`	`+ .json({ success: false, message: 'Unauthorized action.' });`
	`303`	`+ }`
	`304`	`+`
`299`	`305`	`if (newVisibility !== 'Private' && newVisibility !== 'Public') {`
`300`	`306`	`return res.status(400).json({ success: false, message: 'Invalid data.' });`
`301`	`307`	`}`