Browse Source

Allow accessReports users to load organization ciphers

pull/7397/head
tom27052006 3 weeks ago
parent
commit
df6087f94a
  1. 8
      src/api/core/organizations.rs

8
src/api/core/organizations.rs

@ -1075,8 +1075,12 @@ async fn get_org_details(data: OrgIdData, headers: ManagerHeadersLoose, conn: Db
err_code!("Resource not found.", "Organization id's do not match", rocket::http::Status::NotFound.code); err_code!("Resource not found.", "Organization id's do not match", rocket::http::Status::NotFound.code);
} }
if !headers.membership.has_full_access() { if !headers.membership.has_full_access() && !headers.membership.has_access_reports() {
err_code!("Resource not found.", "User does not have full access", rocket::http::Status::NotFound.code); err_code!(
"Resource not found.",
"User does not have permission to access all organization ciphers",
rocket::http::Status::NotFound.code
);
} }
Ok(Json(json!({ Ok(Json(json!({

Loading…
Cancel
Save