fix(authsome): fix recommendations patch

packages/component-manuscript-manager/src/routes/fragmentsRecommendations/patch.js

@@ -29,12 +29,8 @@ module.exports = models => async (req, res) => {
       })
 
     const authsome = authsomeHelper.getAuthsome(models)
-    const authsomeObject =
-      recommendation.recommendationType === 'editorRecommendation'
-        ? collection
-        : fragment
     const target = {
-      authsomeObject,
+      fragment,
       path: req.route.path,
     }
     const canPatch = await authsome.can(req.user, 'PATCH', target)

packages/component-manuscript/src/components/utils.js

@@ -139,7 +139,6 @@ const onChange = (
 ) => {
   const newValues = parseReviewRequest(values)
   const prevValues = parseReviewRequest(previousValues)
-
   if (!isEqual(newValues, prevValues)) {
     dispatch(autosaveRequest())
     if (newValues.id) {

packages/xpub-faraday/config/authsome-mode.js

@@ -201,7 +201,7 @@ async function authenticatedUser(user, operation, object, context) {
     // allow reviewer to patch his recommendation
     if (
       get(object, 'path') ===
-      '/api/collections/:collectionId/fragments/:fragmentId/recommendations'
+      '/api/collections/:collectionId/fragments/:fragmentId/recommendations/:recommendationId'
     ) {
       return helpers.hasPermissionForObject({
         user,