fix: ensure only authenticated users can access the payload-locked-documents collection (#11624)

2025-03-11 10:57:12 -04:00
parent 85f88a0194
commit 8f3d1bd871
1 changed files with 8 additions and 0 deletions
--- a/packages/payload/src/locked-documents/config.ts
+++ b/packages/payload/src/locked-documents/config.ts
@@ -2,10 +2,18 @@
 import type { CollectionConfig } from '../collections/config/types.js'
 import type { Config } from '../config/types.js'

+import defaultAccess from '../auth/defaultAccess.js'
+
 export const lockedDocumentsCollectionSlug = 'payload-locked-documents'

 export const getLockedDocumentsCollection = (config: Config): CollectionConfig => ({
  slug: lockedDocumentsCollectionSlug,
+  access: {
+    create: defaultAccess,
+    delete: defaultAccess,
+    read: defaultAccess,
+    update: defaultAccess,
+  },
  admin: {
    hidden: true,
  },