📁 feat: restrict access to drive search result (#2758)

twake/backend/node/src/services/documents/services/index.ts

@@ -711,7 +711,7 @@ export class DocumentsService {
     options: SearchDocumentsOptions,
     context?: DriveExecutionContext,
   ): Promise<ListResult<DriveFile>> => {
-    return await this.searchRepository.search(
+    const result = await this.searchRepository.search(
       {},
       {
         pagination: {
@@ -726,5 +726,22 @@ export class DocumentsService {
       },
       context,
     );
+
+    // Use Promise.all to check access on each item in parallel
+    const filteredResult = await Promise.all(
+      result.getEntities().filter(async item => {
+        try {
+          // Check access for each item
+          const hasAccess = await checkAccess(item.id, null, "read", this.repository, context);
+          // Return true if the user has access
+          return hasAccess;
+        } catch (error) {
+          this.logger.warn("failed to check item access", error);
+          return false;
+        }
+      }),
+    );
+
+    return new ListResult(result.type, filteredResult, result.nextPage);
   };
 }