mirror of
https://github.com/bitwarden/server
synced 2025-12-25 04:33:26 +00:00
fix: add permission check for collection management api, refs AC-1647 (#3252)
This commit is contained in:
@@ -773,6 +773,11 @@ public class OrganizationsController : Controller
|
||||
throw new NotFoundException();
|
||||
}
|
||||
|
||||
if (!await _currentContext.OrganizationOwner(id))
|
||||
{
|
||||
throw new NotFoundException();
|
||||
}
|
||||
|
||||
await _organizationService.UpdateAsync(model.ToOrganization(organization));
|
||||
return new OrganizationResponseModel(organization);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user