Prisma

Screenshot 2022-07-13 at 15.28.35.png

Hi! Is there a correct way to validate that the user has permissions to modify an entry?
I'm a app that has a products CRUD
Each product belongs only to one user.
Which will be the correct way to validate that the product that will be modified, belongs to the user?
I'm currently fetching the product, validating the user is correct, and then updating the product.
But can this be done in the same update mutation?
Something like this?

I think the problem is update can only run on a unique field, `updateMany` should work with what you have..

hi <@U03L91CNFK8> - you could also write what you have as:
```
prisma.product.updateMany({
  where: {
    userId: userId,
    id: req.query.id
  }
});```
there's an implicit `AND` between those ..

It's bad that we can't do it by just using the update, which makes more sense for the type of action

You can always check it before-hand if the update semantic is important or more ergonomic
```let product = await prisma.product.findFirst({where: { userId, id }})
if (!product) throw new NotFoundError()

product = await prisma.product.update({ where: {id}, data: input})```