mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-09 17:28:26 +00:00
add membership validate to folder get
This commit is contained in:
@@ -88,10 +88,20 @@ export const deleteFolder = async (req: Request, res: Response) => {
|
|||||||
res.send()
|
res.send()
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// TODO: validate workspace
|
||||||
export const getFolderById = async (req: Request, res: Response) => {
|
export const getFolderById = async (req: Request, res: Response) => {
|
||||||
const { folderId } = req.params
|
const { folderId } = req.params
|
||||||
|
|
||||||
const folder = await Folder.findById(folderId)
|
const folder = await Folder.findById(folderId);
|
||||||
|
if (!folder) {
|
||||||
|
throw BadRequestError({ message: "The folder doesn't exist" })
|
||||||
|
}
|
||||||
|
// check that user is a member of the workspace
|
||||||
|
await validateMembership({
|
||||||
|
userId: req.user._id.toString(),
|
||||||
|
workspaceId: folder.workspace as any,
|
||||||
|
acceptedRoles: [ADMIN, MEMBER]
|
||||||
|
});
|
||||||
|
|
||||||
res.send({ folder })
|
res.send({ folder })
|
||||||
}
|
}
|
||||||
Reference in New Issue
Block a user