nits

dust-tt · Apr 4, 2024 · 23192c9 · 23192c9
1 parent e120d41
commit 23192c9
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/front/lib/api/invitation.ts b/front/lib/api/invitation.ts
@@ -161,6 +161,11 @@ export async function getPendingInvitations(
   if (!owner) {
     return [];
   }
+  if (!auth.isAdmin()) {
+    throw new Error(
+      "Only users that are `admins` for the current workspace can see membership invitations or modify it."
+    );
+  }
 
   const invitations = await MembershipInvitation.findAll({
     where: {
@@ -194,6 +199,11 @@ export async function getRecentPendingOrRevokedInvitations(
   if (!owner) {
     return [];
   }
+  if (!auth.isAdmin()) {
+    throw new Error(
+      "Only users that are `admins` for the current workspace can see membership invitations or modify it."
+    );
+  }
   const oneDayAgo = new Date();
   oneDayAgo.setDate(oneDayAgo.getDate() - 1);
   const invitations = await MembershipInvitation.findAll({

diff --git a/front/pages/api/w/[wId]/invitations/index.ts b/front/pages/api/w/[wId]/invitations/index.ts
@@ -158,7 +158,7 @@ async function handler(
         auth
       );
       if (
-        unconsumedInvitations.length >
+        unconsumedInvitations.length >=
         MAX_UNCONSUMED_INVITATIONS_PER_WORKSPACE_PER_DAY
       ) {
         return apiError(req, res, {