Skip to content

Commit 36ac79a

Browse files
committed
Make sure users cannot revoke invites for other orgs
1 parent ca94f0c commit 36ac79a

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

apps/webapp/app/models/member.server.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -245,6 +245,7 @@ export async function revokeInvite({
245245
const invite = await prisma.orgMemberInvite.delete({
246246
where: {
247247
id: inviteId,
248+
organizationId: org.id,
248249
},
249250
select: {
250251
email: true,

0 commit comments

Comments
 (0)