opensource/mattermost
3
0
Fork 0
mirror of https://github.com/mattermost/mattermost.git synced 2026-09-24 16:05:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

MM-8825: Make consistent INVITE_USER and ADD_USER_TO_TEAM permissions checking (#8326)

Browse Source
This commit is contained in:
Jesús Espino
2018-02-20 16:19:35 +01:00
committed by GitHub
parent f8289eb286
commit 21afaf4bed
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/team.go
+5
View File
@@ -121,6 +121,11 @@ func inviteMembers(c *Context, w http.ResponseWriter, r *http.Request) {
return
}
if !c.App.SessionHasPermissionToTeam(c.Session, c.TeamId, model.PERMISSION_ADD_USER_TO_TEAM) {
c.SetPermissionError(model.PERMISSION_INVITE_USER)
return
}
if err := c.App.InviteNewUsersToTeam(invites.ToEmailList(), c.TeamId, c.Session.UserId); err != nil {
c.Err = err
return