Fixed permission for editing name of organisation
This commit is contained in:
@@ -222,6 +222,11 @@ class OrganisationController extends SimpleController
|
||||
$transformer = new RequestDataTransformer($schema);
|
||||
$data = $transformer->transform($params);
|
||||
|
||||
$nameSet = isset($data['name']);
|
||||
if (!$nameSet) {
|
||||
$data['name'] = $organisation->name;
|
||||
}
|
||||
|
||||
$error = false;
|
||||
|
||||
// Validate request data
|
||||
@@ -234,8 +239,10 @@ class OrganisationController extends SimpleController
|
||||
// Determine targeted fields
|
||||
$fieldNames = [];
|
||||
foreach ($data as $name => $value) {
|
||||
if ($name == 'name' && $nameSet) {
|
||||
$fieldNames[] = $name;
|
||||
}
|
||||
}
|
||||
|
||||
// Access-controlled resource - check that currentUser has permission to edit submitted fields for this organisation
|
||||
if (!$authorizer->checkAccess($currentUser, 'update_organisation_field', [
|
||||
|
||||
Reference in New Issue
Block a user