fix perms for creating cred set

Author: icecrasher321

apps/sim/app/api/credential-sets/[id]/invite/route.ts

@@ -78,8 +78,8 @@ export async function POST(req: NextRequest, { params }: { params: Promise<{ id:
       return NextResponse.json({ error: 'Credential set not found' }, { status: 404 })
     }
 
-    if (result.role !== 'admin') {
-      return NextResponse.json({ error: 'Admin permissions required' }, { status: 403 })
+    if (result.role !== 'admin' && result.role !== 'owner') {
+      return NextResponse.json({ error: 'Admin or owner permissions required' }, { status: 403 })
     }
 
     const body = await req.json()
@@ -193,8 +193,8 @@ export async function DELETE(req: NextRequest, { params }: { params: Promise<{ i
       return NextResponse.json({ error: 'Credential set not found' }, { status: 404 })
     }
 
-    if (result.role !== 'admin') {
-      return NextResponse.json({ error: 'Admin permissions required' }, { status: 403 })
+    if (result.role !== 'admin' && result.role !== 'owner') {
+      return NextResponse.json({ error: 'Admin or owner permissions required' }, { status: 403 })
     }
 
     await db

apps/sim/app/api/credential-sets/[id]/members/route.ts

@@ -125,8 +125,8 @@ export async function DELETE(req: NextRequest, { params }: { params: Promise<{ i
       return NextResponse.json({ error: 'Credential set not found' }, { status: 404 })
     }
 
-    if (result.role !== 'admin') {
-      return NextResponse.json({ error: 'Admin permissions required' }, { status: 403 })
+    if (result.role !== 'admin' && result.role !== 'owner') {
+      return NextResponse.json({ error: 'Admin or owner permissions required' }, { status: 403 })
     }
 
     const [memberToRemove] = await db

apps/sim/app/api/credential-sets/[id]/route.ts

@@ -75,8 +75,8 @@ export async function PUT(req: NextRequest, { params }: { params: Promise<{ id:
       return NextResponse.json({ error: 'Credential set not found' }, { status: 404 })
     }
 
-    if (result.role !== 'admin') {
-      return NextResponse.json({ error: 'Admin permissions required' }, { status: 403 })
+    if (result.role !== 'admin' && result.role !== 'owner') {
+      return NextResponse.json({ error: 'Admin or owner permissions required' }, { status: 403 })
     }
 
     const body = await req.json()
@@ -138,8 +138,8 @@ export async function DELETE(req: NextRequest, { params }: { params: Promise<{ i
       return NextResponse.json({ error: 'Credential set not found' }, { status: 404 })
     }
 
-    if (result.role !== 'admin') {
-      return NextResponse.json({ error: 'Admin permissions required' }, { status: 403 })
+    if (result.role !== 'admin' && result.role !== 'owner') {
+      return NextResponse.json({ error: 'Admin or owner permissions required' }, { status: 403 })
     }
 
     await db.delete(credentialSetMember).where(eq(credentialSetMember.credentialSetId, id))

apps/sim/app/api/credential-sets/route.ts

@@ -95,9 +95,10 @@ export async function POST(req: Request) {
       .where(and(eq(member.userId, session.user.id), eq(member.organizationId, organizationId)))
       .limit(1)
 
-    if (membership.length === 0 || membership[0].role !== 'admin') {
+    const role = membership[0]?.role
+    if (membership.length === 0 || (role !== 'admin' && role !== 'owner')) {
       return NextResponse.json(
-        { error: 'Admin permissions required to create credential sets' },
+        { error: 'Admin or owner permissions required to create credential sets' },
         { status: 403 }
       )
     }