added userID check

Author: lovelgeorge99

src/poll/poll.controller.ts

@@ -49,8 +49,9 @@ export class PollController {
 
   @Delete(':id')
   async deletePoll(@Param('id') id: number, @Res() res: Response) {
+    const userId = 1; // need to implement Auth
     try {
-      const poll = await this.pollService.deletePoll(Number(id));
+      const poll = await this.pollService.deletePoll(userId, Number(id));
 
       return res.status(200).json({ message: 'Poll deleted', poll: poll });
     } catch (error) {

src/poll/poll.service.ts

@@ -135,13 +135,17 @@ export class PollService {
     }
   }
 
-  async deletePoll(pollId: number) {
+  async deletePoll(userId: number, pollId: number) {
     const poll = await this.databaseService.poll.findUnique({
       where: { pollId },
     });
+
     if (!poll) {
       throw new Error('Poll not found');
     }
+    if (poll.authorUserId !== userId) {
+      throw new Error('User Not Authorized');
+    }
 
     return this.databaseService.$transaction(async (tx) => {
       const deleted = await tx.poll.delete({