mirror of
https://github.com/bitwarden/server.git
synced 2025-07-01 16:12:49 -05:00
fix: add permission check for collection management api, refs AC-1647 (#3252)
This commit is contained in:
@ -773,6 +773,11 @@ public class OrganizationsController : Controller
|
||||
throw new NotFoundException();
|
||||
}
|
||||
|
||||
if (!await _currentContext.OrganizationOwner(id))
|
||||
{
|
||||
throw new NotFoundException();
|
||||
}
|
||||
|
||||
await _organizationService.UpdateAsync(model.ToOrganization(organization));
|
||||
return new OrganizationResponseModel(organization);
|
||||
}
|
||||
|
Reference in New Issue
Block a user