github/umami
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Api work for remove user.

Browse Source
This commit is contained in:
Brian Cao
2023-04-07 22:45:46 -07:00
parent f4f657b666
commit 7b07de7a98
4 changed files with 15 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lib/auth.ts
View File

@@ -187,19 +187,17 @@ export async function canDeleteTeam({ user }: Auth, teamId: string) {
return false;
}
export async function canDeleteTeamUser({ user }: Auth, teamUserId: string) {
export async function canDeleteTeamUser({ user }: Auth, teamId: string, removeUserId: string) {
if (user.isAdmin) {
return true;
}
if (validate(teamUserId)) {
const removeUser = await getTeamUserById(teamUserId);
if (removeUser.userId === user.id) {
if (validate(teamId) && validate(removeUserId)) {
if (removeUserId === user.id) {
return true;
}
const teamUser = await getTeamUser(removeUser.teamId, user.id);
const teamUser = await getTeamUser(teamId, user.id);
return hasPermission(teamUser.role, PERMISSIONS.teamUpdate);
}