selfhosted
/
padloc
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix permission check

This commit is contained in:
Martin Kleinschrodt 2022-06-20 08:16:17 +02:00
parent 8b299bbb88
commit b2544f7303
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
packages/core/src/server.ts
View File

@ -994,14 +994,14 @@ export class Controller extends API {
// Only org owners can add or remove members, change roles, create invites or transfer ownership
if (
!isOwner &&
(owner !== org.owner ||
(owner?.email !== org.owner?.email ||
addedMembers.length ||
removedMembers.length ||
addedInvites.length ||
removedInvites.length ||
members.some(({ email, role }) => {
members.some(({ email, role, status }) => {
const member = org.getMember({ email });
return !member || member.role !== role;
return !member || member.role !== role || member.status !== status;
}))
) {
throw new Err(