Method put

apps/web/server/routers/threads/controller.ts:53–82

(
    req: AuthedRequestWithTenantAndBody<putThreadType>,
    res: Response,
    next: NextFunction
  )

    res.json(threads);
  }
  static async put(
    req: AuthedRequestWithTenantAndBody<putThreadType>,
    res: Response,
    next: NextFunction
  ) {
    // if pinned, must be admin/owner
    if (
      typeof req.body.pinned === 'boolean' &&
      isNotManager(req.tenant_user?.role)
    ) {
      return next(new Forbidden('User not allow to pin messages'));
    }

    // if member, must be the creator
    if (isMember(req.tenant_user?.role)) {
      const thread = await ThreadsServices.get({
        id: req.body.id,
        accountId: req.tenant?.id!,
      });
      if (req.tenant_user?.id !== thread?.messages?.shift()?.author?.id) {
        return next(new Forbidden('User not allow to update this message'));
      }
    }

    const thread = await ThreadsServices.update({
      ...req.body,
      accountId: req.tenant?.id!,
    });
    res.json(thread);
  }
  static async post(
    req: AuthedRequestWithTenantAndBody<postThreadType>,
    res: Response,