Fixed permission for editing name of organisation

This commit is contained in:
2022-03-08 16:52:51 +00:00
parent a07ec92546
commit 05942afd61

View File

@@ -222,6 +222,11 @@ class OrganisationController extends SimpleController
$transformer = new RequestDataTransformer($schema);
$data = $transformer->transform($params);
$nameSet = isset($data['name']);
if (!$nameSet) {
$data['name'] = $organisation->name;
}
$error = false;
// Validate request data
@@ -234,7 +239,9 @@ class OrganisationController extends SimpleController
// Determine targeted fields
$fieldNames = [];
foreach ($data as $name => $value) {
$fieldNames[] = $name;
if ($name == 'name' && $nameSet) {
$fieldNames[] = $name;
}
}
// Access-controlled resource - check that currentUser has permission to edit submitted fields for this organisation