@@ -826,7 +826,7 @@ func (q *querier) DeleteOAuth2ProviderAppCodeByID(ctx context.Context, id uuid.U
826826if err != nil {
827827return err
828828}
829- if err := q .authorizeContext (ctx ,rbac .ActionDelete ,rbac . ResourceOAuth2ProviderAppCodeToken . WithOwner ( code . UserID . String ()) );err != nil {
829+ if err := q .authorizeContext (ctx ,rbac .ActionDelete ,code );err != nil {
830830return err
831831}
832832return q .db .DeleteOAuth2ProviderAppCodeByID (ctx ,id )
@@ -1222,7 +1222,7 @@ func (q *querier) GetOAuth2ProviderApps(ctx context.Context) ([]database.OAuth2P
12221222}
12231223
12241224func (q * querier )GetOAuth2ProviderAppsByUserID (ctx context.Context ,userID uuid.UUID ) ([]database.GetOAuth2ProviderAppsByUserIDRow ,error ) {
1225- //These two authzchecks make sure the caller can read all their own tokens.
1225+ //This authzcheck is to make sure the caller can read all their own tokens.
12261226if err := q .authorizeContext (ctx ,rbac .ActionRead ,
12271227rbac .ResourceOAuth2ProviderAppCodeToken .WithOwner (userID .String ()));err != nil {
12281228return []database.GetOAuth2ProviderAppsByUserIDRow {},err