From dadbca5248ee53c418be8aab79911d9edd65b351 Mon Sep 17 00:00:00 2001
From: Gani Georgiev <gani.georgiev@gmail.com>
Date: Fri, 3 Jan 2025 17:35:21 +0200
Subject: [PATCH] use the original record id in the update manage rule checks

---
 apis/record_crud.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/apis/record_crud.go b/apis/record_crud.go
index a5a6c33e..ea6b60fa 100644
--- a/apis/record_crud.go
+++ b/apis/record_crud.go
@@ -453,7 +453,8 @@ func recordUpdate(optFinalizer func(data any) error) func(e *core.RequestEvent)
 			form.SetRecord(e.Record)
 
 			manageRuleQuery := e.App.DB().Select("(1)").From(e.Collection.Name).AndWhere(dbx.HashExp{
-				e.Collection.Name + ".id": e.Record.Id,
+				// note: use the original record id and not e.Record.Id because the record validations because may get overwritten
+				e.Collection.Name + ".id": e.Record.LastSavedPK(),
 			})
 			if !form.HasManageAccess() &&
 				hasAuthManageAccess(e.App, requestInfo, e.Collection, manageRuleQuery) {