awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-04 23:26:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Add missing actor org ID to permission check

Browse Source
This commit is contained in:
Daniel Hougaard
2024-03-17 18:49:29 +01:00
parent 4d4887059a
commit f5f20fbdca
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/project-membership/project-membership-service.ts
+8 -1
View File
@@ -166,6 +166,7 @@ export const projectMembershipServiceFactory = ({
actorId, actorId,
actorAuthMethod, actorAuthMethod,
actor, actor,
actorOrgId,
emails, emails,
usernames, usernames,
sendEmails = true sendEmails = true
@@ -177,7 +178,13 @@ export const projectMembershipServiceFactory = ({
throw new BadRequestError({ message: "Please upgrade your project on your dashboard" }); throw new BadRequestError({ message: "Please upgrade your project on your dashboard" });
} }
const { permission } = await permissionService.getProjectPermission(actor, actorId, projectId, actorAuthMethod); const { permission } = await permissionService.getProjectPermission(
actor,
actorId,
projectId,
actorAuthMethod,
actorOrgId
);
ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Member); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Member);
const usernamesAndEmails = [...emails, ...usernames]; const usernamesAndEmails = [...emails, ...usernames];