fix: Admins should be able to add and remove themselves from collections

This commit is contained in:
Tom Moor
2023-05-04 21:52:59 -04:00
parent 0504e91aa6
commit ac8946f0c5
7 changed files with 30 additions and 18 deletions

View File

@@ -13,7 +13,7 @@ import { colorPalette } from "@shared/utils/collections";
import collectionExporter from "@server/commands/collectionExporter";
import teamUpdater from "@server/commands/teamUpdater";
import { sequelize } from "@server/database/sequelize";
import { AuthorizationError, ValidationError } from "@server/errors";
import { ValidationError } from "@server/errors";
import auth from "@server/middlewares/authentication";
import { rateLimiter } from "@server/middlewares/rateLimiter";
import { transaction } from "@server/middlewares/transaction";
@@ -406,10 +406,6 @@ router.post(
lock: transaction.LOCK.UPDATE,
});
if (userId === actor.id) {
throw AuthorizationError("You cannot add yourself to a collection");
}
if (permission) {
assertCollectionPermission(permission);
}