mirror of
https://github.com/bitwarden/server.git
synced 2025-06-30 23:52:50 -05:00
Resolved an issue where the API required users to be organization owners when accessing the members page (#4534)
This commit is contained in:
@ -20,7 +20,7 @@ public class OrganizationBillingController(
|
||||
[HttpGet("metadata")]
|
||||
public async Task<IResult> GetMetadataAsync([FromRoute] Guid organizationId)
|
||||
{
|
||||
if (!await currentContext.ViewBillingHistory(organizationId))
|
||||
if (!await currentContext.AccessMembersTab(organizationId))
|
||||
{
|
||||
return TypedResults.Unauthorized();
|
||||
}
|
||||
|
Reference in New Issue
Block a user