From 08fb883ed2cbe4582342af2c85945364259b04c1 Mon Sep 17 00:00:00 2001
From: artaasadi <arta-c@kaytu.io>
Date: Thu, 1 Aug 2024 15:20:51 +0200
Subject: [PATCH] fix: fix workspace check query

---
 pkg/auth/db/db.go | 17 +++++++----------
 1 file changed, 7 insertions(+), 10 deletions(-)

diff --git a/pkg/auth/db/db.go b/pkg/auth/db/db.go
index bfeb7085c..5ffe5dc7a 100644
--- a/pkg/auth/db/db.go
+++ b/pkg/auth/db/db.go
@@ -2,6 +2,7 @@ package db
 
 import (
 	"errors"
+	"fmt"
 	"github.com/jackc/pgtype"
 	"github.com/kaytu-io/kaytu-util/pkg/api"
 	"gorm.io/gorm"
@@ -264,8 +265,8 @@ func (db Database) GetUsersByEmail(email string) ([]User, error) {
 
 func (db Database) GetUsersByWorkspace(ws string) ([]User, error) {
 	var users []User
-	query := `SELECT * FROM users WHERE app_metadata->'workspaceAccess' \? ?`
-	err := db.Orm.Raw(query, ws).Scan(&users).Error
+	query := fmt.Sprintf("SELECT * FROM users WHERE app_metadata->'workspaceAccess' ? '%s'", ws)
+	err := db.Orm.Raw(query).Scan(&users).Error
 	if err != nil {
 		return nil, err
 	}
@@ -274,21 +275,17 @@ func (db Database) GetUsersByWorkspace(ws string) ([]User, error) {
 
 func (db Database) SearchUsers(ws string, email *string, emailVerified *bool) ([]User, error) {
 	var users []User
-	query := `SELECT * FROM users WHERE app_metadata->'workspaceAccess' \? ?`
-
-	params := []interface{}{ws}
+	query := fmt.Sprintf("SELECT * FROM users WHERE app_metadata->'workspaceAccess' ? '%s'", ws)
 
 	if email != nil {
-		query += ` AND email = ?`
-		params = append(params, *email)
+		query += fmt.Sprintf(" AND email = %s", *email)
 	}
 
 	if emailVerified != nil {
-		query += ` AND email_verified = ?`
-		params = append(params, *emailVerified)
+		query += fmt.Sprintf(" AND email_verified = %v", *emailVerified)
 	}
 
-	err := db.Orm.Raw(query, params...).Scan(&users).Error
+	err := db.Orm.Raw(query).Scan(&users).Error
 	if err != nil {
 		return nil, err
 	}