feat: add parent announcements and family or child event responses

src/app/api/announcements/attachments/[id]/route.ts

@@ -4,6 +4,7 @@ import { NextResponse } from "next/server";
 
 import { auth } from "@/auth";
 import { prisma } from "@/lib/prisma";
+import { visibleAnnouncementAudiences } from "@/lib/announcement-access";
 
 export const runtime = "nodejs";
 
@@ -37,6 +38,7 @@ export async function GET(
       id,
       announcement: {
         kitaId: user.kitaId,
+        audience: { in: visibleAnnouncementAudiences(user) },
       },
     },
     select: {
@@ -56,7 +58,7 @@ export async function GET(
       headers: {
         "Content-Type": attachment.fileType,
         "Content-Disposition": contentDisposition(attachment.fileName),
-        "Cache-Control": "private, max-age=300",
+        "Cache-Control": "private, no-store",
       },
     });
   } catch (error) {