1
0
mirror of https://github.com/bitwarden/server.git synced 2025-06-30 23:52:50 -05:00

Resolved an issue where the API required users to be organization owners when accessing the members page (#4534)

This commit is contained in:
Conner Turnbull
2024-07-19 10:24:48 -04:00
committed by GitHub
parent 81477303e3
commit 9b9f202f79
4 changed files with 10 additions and 4 deletions

View File

@ -20,7 +20,7 @@ public class OrganizationBillingController(
[HttpGet("metadata")]
public async Task<IResult> GetMetadataAsync([FromRoute] Guid organizationId)
{
if (!await currentContext.ViewBillingHistory(organizationId))
if (!await currentContext.AccessMembersTab(organizationId))
{
return TypedResults.Unauthorized();
}