From 3c62782a8df85cd15e2cb75d82355d47035e13a9 Mon Sep 17 00:00:00 2001
From: Ricky Stretch <rick@stretchy.ca>
Date: Mon, 16 Mar 2026 20:27:42 -0400
Subject: [PATCH] v0.9.45 fixed user group permissions

---
 .env.example                | 2 +-
 backend/package.json        | 2 +-
 backend/src/routes/users.js | 4 ++--
 build.sh                    | 2 +-
 frontend/package.json       | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.env.example b/.env.example
index 402ca1a..dffe0dd 100644
--- a/.env.example
+++ b/.env.example
@@ -10,7 +10,7 @@
 PROJECT_NAME=jama
 
 # Image version to run (set by build.sh, or use 'latest')
-JAMA_VERSION=0.9.44
+JAMA_VERSION=0.9.45
 
 # App port — the host port Docker maps to the container
 PORT=3000
diff --git a/backend/package.json b/backend/package.json
index 606ce80..48a12a9 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "jama-backend",
-  "version": "0.9.44",
+  "version": "0.9.45",
   "description": "TeamChat backend server",
   "main": "src/index.js",
   "scripts": {
diff --git a/backend/src/routes/users.js b/backend/src/routes/users.js
index f02ed75..98757dd 100644
--- a/backend/src/routes/users.js
+++ b/backend/src/routes/users.js
@@ -4,7 +4,7 @@ const multer = require('multer');
 const path = require('path');
 const router = express.Router();
 const { getDb, addUserToPublicGroups, getOrCreateSupportGroup } = require('../models/db');
-const { authMiddleware, adminMiddleware } = require('../middleware/auth');
+const { authMiddleware, adminMiddleware, teamManagerMiddleware } = require('../middleware/auth');
 
 const avatarStorage = multer.diskStorage({
   destination: '/app/uploads/avatars',
@@ -46,7 +46,7 @@ function getDefaultPassword(db) {
 }
 
 // List users (admin)
-router.get('/', authMiddleware, adminMiddleware, (req, res) => {
+router.get('/', authMiddleware, teamManagerMiddleware, (req, res) => {
   const db = getDb();
   const users = db.prepare(`
     SELECT id, name, email, role, status, is_default_admin, must_change_password, avatar, about_me, display_name, allow_dm, created_at, last_online
diff --git a/build.sh b/build.sh
index 47e4f84..0d88173 100644
--- a/build.sh
+++ b/build.sh
@@ -13,7 +13,7 @@
 # ─────────────────────────────────────────────────────────────
 set -euo pipefail
 
-VERSION="${1:-0.9.44}"
+VERSION="${1:-0.9.45}"
 ACTION="${2:-}"
 REGISTRY="${REGISTRY:-}"
 IMAGE_NAME="jama"
diff --git a/frontend/package.json b/frontend/package.json
index 8b80c4f..c052781 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "jama-frontend",
-  "version": "0.9.44",
+  "version": "0.9.45",
   "private": true,
   "scripts": {
     "dev": "vite",