From adc3d952544e7e602c18adbcce1b76dc18f0e51b Mon Sep 17 00:00:00 2001
From: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
Date: Mon, 31 Mar 2025 16:52:51 +0200
Subject: [PATCH] fix: only get apps for the current team

---
 app/Http/Controllers/Api/DeployController.php | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/app/Http/Controllers/Api/DeployController.php b/app/Http/Controllers/Api/DeployController.php
index 4bb7dedbd..870f7fdce 100644
--- a/app/Http/Controllers/Api/DeployController.php
+++ b/app/Http/Controllers/Api/DeployController.php
@@ -5,8 +5,8 @@ namespace App\Http\Controllers\Api;
 use App\Actions\Database\StartDatabase;
 use App\Actions\Service\StartService;
 use App\Http\Controllers\Controller;
-use App\Models\ApplicationDeploymentQueue;
 use App\Models\Application;
+use App\Models\ApplicationDeploymentQueue;
 use App\Models\Server;
 use App\Models\Tag;
 use Illuminate\Http\Request;
@@ -370,17 +370,11 @@ class DeployController extends Controller
             return response()->json(['message' => 'Application uuid is required'], 400);
         }
 
-        $application = Application::where('uuid', $app_uuid)->first();
+        $application = Application::ownedByCurrentTeamAPI($teamId)->where('uuid', $app_uuid)->first();
 
         if (is_null($application)) {
             return response()->json(['message' => 'Application not found'], 404);
         }
-
-        $team = $application->team();
-        if ($team->id != $teamId) {
-            return response()->json(['message' => 'Application not found'], 404);
-        }
-
         $deployments = $application->deployments($skip, $take);
 
         return response()->json($deployments);