nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-07-04 01:22:50 -05:00
Code Activity

only owners can manage owners

Browse Source
This commit is contained in:
Kyle Spearrin
2017-09-27 22:37:13 -04:00
parent c135a2a166
commit 2444346ea9
2 changed files with 32 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/Api/Controllers/OrganizationUsersController.cs
View File

@ -174,6 +174,11 @@ namespace Bit.Api.Controllers
throw new NotFoundException();
}
if(organizationUser.Type == Core.Enums.OrganizationUserType.Owner && !_currentContext.OrganizationOwner(orgGuidId))
{
throw new BadRequestException("Only owners can update other owners.");
}
await _organizationUserRepository.UpdateGroupsAsync(organizationUser.Id, model.GroupIds.Select(g => new Guid(g)));
}