diff --git a/src/Controller/OrganisationMembersController.php b/src/Controller/OrganisationMembersController.php index 4236bcc..bd7a134 100644 --- a/src/Controller/OrganisationMembersController.php +++ b/src/Controller/OrganisationMembersController.php @@ -434,7 +434,8 @@ class OrganisationMembersController extends SimpleController // Access-controlled page if (!$authorizer->checkAccess($currentUser, 'promote_organistion_member', [ - 'organisation' => $organisation + 'organisation' => $organisation, + 'user' => $user, ])) { throw new ForbiddenException(); } @@ -530,7 +531,8 @@ class OrganisationMembersController extends SimpleController // Access-controlled page if (!$authorizer->checkAccess($currentUser, 'promote_organistion_member', [ - 'organisation' => $organisation + 'organisation' => $organisation, + 'user' => $user, ])) { throw new ForbiddenException(); } @@ -1193,6 +1195,7 @@ class OrganisationMembersController extends SimpleController // Access-controlled page if (!$authorizer->checkAccess($currentUser, 'promote_organistion_member', [ 'organisation' => $organisation, + 'user' => $user, ])) { throw new ForbiddenException(); } @@ -1241,6 +1244,7 @@ class OrganisationMembersController extends SimpleController // Access-controlled page if (!$authorizer->checkAccess($currentUser, 'promote_organistion_member', [ 'organisation' => $organisation, + 'user' => $user, ])) { throw new ForbiddenException(); }