feat(rbac): implemented granular blocking of actions based on permissions on org level ui

2026-10-07 07:27:58 +00:00 · 2023-09-08 21:21:43 +05:30
parent 34fb7be1c4
commit aac3168c80
41 changed files with 1992 additions and 1652 deletions
@@ -292,7 +292,7 @@ export const createOrganizationPortalSession = async (req: Request, res: Respons

  const { permission } = await getUserOrgPermissions(req.user._id, organizationId);
  ForbiddenError.from(permission).throwUnlessCan(
-    GeneralPermissionActions.Create,
+    GeneralPermissionActions.Edit,
    OrgPermissionSubjects.Billing
  );