fix: restrict deletion to cancelled requests

2026-07-20 19:37:30 +09:00
parent 10da3ff62d
commit 7617c9f371
3 changed files with 9 additions and 50 deletions
--- a/server/routes/business.ts
+++ b/server/routes/business.ts
@@ -588,6 +588,7 @@ export function createBusinessRouter(deps: BusinessRouterDeps = { query }): Rout
    const id = Number(req.params.id);
    const visit = await visitById(dbQuery, id);
    if (!visit) throw new ApiError(404, '방문 신청을 찾을 수 없습니다.');
+    if (visit.status !== 'CANCELLED') throw new ApiError(400, '취소 상태인 신청만 삭제할 수 있습니다.');

    await dbQuery('DELETE FROM pass_deliveries WHERE visit_request_id = $1', [id]);
    await dbQuery('DELETE FROM approvals WHERE visit_request_id = $1', [id]);