Pārlūkot izejas kodu

add platform id check on user invites

abhishek9686 1 gadu atpakaļ
vecāks
revīzija
a7b21d4233
1 mainītis faili ar 4 papildinājumiem un 0 dzēšanām
  1. 4 0
      pro/controllers/users.go

+ 4 - 0
pro/controllers/users.go

@@ -174,6 +174,10 @@ func inviteUsers(w http.ResponseWriter, r *http.Request) {
 		logic.ReturnErrorResponse(w, r, logic.FormatError(errors.New("super admin cannot be invited"), "badrequest"))
 		return
 	}
+	if inviteReq.PlatformRoleID == "" {
+		logic.ReturnErrorResponse(w, r, logic.FormatError(errors.New("platform role id cannot be empty"), "badrequest"))
+		return
+	}
 	if (inviteReq.PlatformRoleID == models.AdminRole.String() ||
 		inviteReq.PlatformRoleID == models.SuperAdminRole.String()) && caller.PlatformRoleID != models.SuperAdminRole {
 		logic.ReturnErrorResponse(w, r, logic.FormatError(errors.New("only superadmin can invite admin users"), "forbidden"))