fix(access-control): normalize blockType to lowercase before env allowlist check

waleedlatif1 · waleedlatif1 · commit d0a3cd310529 · 2026-02-17T18:04:48.000-08:00
diff --git a/apps/sim/ee/access-control/utils/permission-check.ts b/apps/sim/ee/access-control/utils/permission-check.ts
@@ -161,7 +161,7 @@ export async function validateBlockType(
   }
 
   const envAllowlist = getAllowedIntegrationsFromEnv()
-  if (envAllowlist !== null && !envAllowlist.includes(blockType)) {
+  if (envAllowlist !== null && !envAllowlist.includes(blockType.toLowerCase())) {
     logger.warn('Integration blocked by env allowlist', { blockType })
     throw new IntegrationNotAllowedError(blockType, 'blocked by server ALLOWED_INTEGRATIONS policy')
   }

Original file line number	Diff line number	Diff line change
`@@ -161,7 +161,7 @@ export async function validateBlockType(`
`161`	`161`	`}`
`162`	`162`
`163`	`163`	`const envAllowlist = getAllowedIntegrationsFromEnv()`
`164`		`- if (envAllowlist !== null && !envAllowlist.includes(blockType)) {`
	`164`	`+ if (envAllowlist !== null && !envAllowlist.includes(blockType.toLowerCase())) {`
`165`	`165`	`logger.warn('Integration blocked by env allowlist', { blockType })`
`166`	`166`	`throw new IntegrationNotAllowedError(blockType, 'blocked by server ALLOWED_INTEGRATIONS policy')`
`167`	`167`	`}`