fix: check edited member, not editor, for org owner permission guard (#6024)
fix: check edited member, not editor, for org owner permission guard (#1400)
This commit is contained in:
@@ -760,7 +760,19 @@ pub async fn edit_team_member(
|
|||||||
None
|
None
|
||||||
};
|
};
|
||||||
|
|
||||||
if organization_team_member
|
let edited_member_organization_team_member =
|
||||||
|
if let Some(organization) = &organization {
|
||||||
|
DBTeamMember::get_from_user_id(
|
||||||
|
organization.team_id,
|
||||||
|
user_id,
|
||||||
|
&**pool,
|
||||||
|
)
|
||||||
|
.await?
|
||||||
|
} else {
|
||||||
|
None
|
||||||
|
};
|
||||||
|
|
||||||
|
if edited_member_organization_team_member
|
||||||
.as_ref()
|
.as_ref()
|
||||||
.is_some_and(|x| x.is_owner)
|
.is_some_and(|x| x.is_owner)
|
||||||
&& edit_member
|
&& edit_member
|
||||||
|
|||||||
Reference in New Issue
Block a user