Skip to content

Commit 9559892

Browse files
committed
fixup: missing perm check on updateAuthProvider
1 parent bd2cbcc commit 9559892

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

components/server/src/auth/auth-provider-service.ts

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,8 +113,11 @@ export class AuthProviderService {
113113
}
114114

115115
async updateAuthProvider(
116+
userId: string,
116117
entry: AuthProviderEntry.UpdateEntry | AuthProviderEntry.NewEntry,
117118
): Promise<AuthProviderEntry> {
119+
await this.auth.checkPermissionOnUser(userId, "write_info", userId);
120+
118121
let authProvider: AuthProviderEntry;
119122
if ("id" in entry) {
120123
const { id, ownerId } = entry;

0 commit comments

Comments
 (0)