fix collaborator security query

Signed-off-by: Alexander Onnikov <Alexander.Onnikov@xored.com>

Author: aonnikov

packages/postgres/CHANGELOG.json

@@ -1,6 +1,18 @@
 {
   "name": "@hcengineering/postgres",
   "entries": [
+    {
+      "version": "0.7.21",
+      "tag": "@hcengineering/postgres_v0.7.21",
+      "date": "Tue, 02 Dec 2025 04:08:02 GMT",
+      "comments": {
+        "patch": [
+          {
+            "comment": "fix collaborator security query"
+          }
+        ]
+      }
+    },
     {
       "version": "0.7.20",
       "tag": "@hcengineering/postgres_v0.7.20",

packages/postgres/CHANGELOG.md

@@ -1,6 +1,13 @@
 # Change Log - @hcengineering/postgres
 
-This log was last generated on Wed, 26 Nov 2025 16:04:43 GMT and should not be manually modified.
+This log was last generated on Tue, 02 Dec 2025 04:08:02 GMT and should not be manually modified.
+
+## 0.7.21
+Tue, 02 Dec 2025 04:08:02 GMT
+
+### Patches
+
+- fix collaborator security query
 
 ## 0.7.20
 Wed, 26 Nov 2025 16:04:43 GMT

packages/postgres/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hcengineering/postgres",
-  "version": "0.7.20",
+  "version": "0.7.21",
   "main": "lib/index.js",
   "svelte": "src/index.ts",
   "types": "types/index.d.ts",

packages/postgres/src/storage.ts

@@ -640,7 +640,7 @@ abstract class PostgresAdapterBase implements DbAdapter {
         const collabSec = getClassCollaborators(this.modelDb, this.hierarchy, _class)
         if (collabSec?.provideSecurity === true && [AccountRole.Guest, AccountRole.ReadOnlyGuest].includes(acc.role)) {
           const collab = `OR EXISTS (SELECT 1 FROM ${translateDomain(DOMAIN_COLLABORATOR)} collab_sec WHERE collab_sec."workspaceId" = ${vars.add(this.workspaceId, '::uuid')} AND collab_sec."attachedTo" = ${domain}._id AND collab_sec.collaborator = '${acc.uuid}')`
-          return `AND (${res} + ${collab})`
+          return `AND (${res} ${collab})`
         }
         return `AND (${res})`
       }