fix: 🛂 Protect from others to consult typebots and folders

apps/builder/pages/api/folders/[id].ts

@@ -1,5 +1,5 @@
 import { withSentry } from '@sentry/nextjs'
-import { DashboardFolder } from 'db'
+import { DashboardFolder, User } from 'db'
 import prisma from 'libs/prisma'
 import { NextApiRequest, NextApiResponse } from 'next'
 import { getSession } from 'next-auth/react'
@@ -12,22 +12,23 @@ const handler = async (req: NextApiRequest, res: NextApiResponse) => {
     return res.status(401).json({ message: 'Not authenticated' })
 
   const id = req.query.id.toString()
+  const user = session.user as User
   if (req.method === 'GET') {
     const folder = await prisma.dashboardFolder.findUnique({
-      where: { id },
+      where: { id_ownerId: { id, ownerId: user.id } },
     })
     return res.send({ folder })
   }
   if (req.method === 'DELETE') {
     const folders = await prisma.dashboardFolder.delete({
-      where: { id },
+      where: { id_ownerId: { id, ownerId: user.id } },
     })
     return res.send({ folders })
   }
   if (req.method === 'PATCH') {
     const data = JSON.parse(req.body) as Partial<DashboardFolder>
     const folders = await prisma.dashboardFolder.update({
-      where: { id },
+      where: { id_ownerId: { id, ownerId: user.id } },
       data,
     })
     return res.send({ typebots: folders })