awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 09:28:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: only check for delete protection if deleting org identity, not sub-org identity membership

Browse Source
This commit is contained in:
Scott Wilson
2025-11-13 12:52:40 +05:30
committed by =
parent 3c79ffb16c
commit d026de4ec1
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/identity/identity-service.ts
+3 -3
View File
@@ -329,14 +329,14 @@ export const identityServiceFactory = ({
ForbiddenError.from(permission).throwUnlessCan(OrgPermissionIdentityActions.Delete, OrgPermissionSubjects.Identity); ForbiddenError.from(permission).throwUnlessCan(OrgPermissionIdentityActions.Delete, OrgPermissionSubjects.Identity);
if (identityOrgMembership.identity.hasDeleteProtection)
throw new BadRequestError({ message: "Identity has delete protection" });
if (identityOrgMembership.identity.projectId) { if (identityOrgMembership.identity.projectId) {
throw new BadRequestError({ message: `Identity is managed by project` }); throw new BadRequestError({ message: `Identity is managed by project` });
} }
if (identityOrgMembership.identity.orgId === actorOrgId) { if (identityOrgMembership.identity.orgId === actorOrgId) {
if (identityOrgMembership.identity.hasDeleteProtection)
throw new BadRequestError({ message: "Identity has delete protection" });
const deletedIdentity = await identityDAL.deleteById(id); const deletedIdentity = await identityDAL.deleteById(id);
await licenseService.updateSubscriptionOrgMemberCount(identityOrgMembership.scopeOrgId); await licenseService.updateSubscriptionOrgMemberCount(identityOrgMembership.scopeOrgId);
return { ...deletedIdentity, orgId: identityOrgMembership.scopeOrgId }; return { ...deletedIdentity, orgId: identityOrgMembership.scopeOrgId };