pangolin_mirror/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-03-05 10:16:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

Ensure the user's actions

Browse Source
This commit is contained in:
Owen Schwartz
2024-10-10 21:59:30 -04:00
parent 143a3b756e
commit 4fc630cf42
9 changed files with 74 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
server/routers/org/createOrg.ts
View File

@@ -7,6 +7,7 @@ import HttpCode from '@server/types/HttpCode';
import createHttpError from 'http-errors';
import { ActionsEnum, checkUserActionPermission } from '@server/auth/actions';
import logger from '@server/logger';
import { createSuperuserRole } from '@server/db/ensureActions';
const createOrgSchema = z.object({
name: z.string().min(1).max(255),
@@ -50,6 +51,8 @@ export async function createOrg(req: Request, res: Response, next: NextFunction)
domain,
}).returning();
await createSuperuserRole(newOrg[0].orgId);
return response(res, {
data: newOrg[0],
success: true,

6
server/routers/user/getUser.ts
View File

@@ -18,12 +18,6 @@ export async function getUser(req: Request, res: Response, next: NextFunction):
return next(createHttpError(HttpCode.UNAUTHORIZED, "User not found"));
}
// // Check if the user has permission to list sites
// const hasPermission = await checkUserActionPermission(ActionsEnum.getUser, req);
// if (!hasPermission) {
// return next(createHttpError(HttpCode.FORBIDDEN, 'User does not have permission to list sites'));
// }
const user = await db.select()
.from(users)
.where(eq(users.id, userId))