Allow site admin to check /api/v1/orgs endpoints (#10867)

Fix #9950

Signed-off-by: Andrew Thornton <art27@cantab.net>
tokarchuk/v1.17
zeripath 5 years ago committed by GitHub
parent 052bff0cff
commit 48890ce546
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 2
      routers/api/v1/org/member.go
  2. 2
      routers/api/v1/org/team.go

@ -69,7 +69,7 @@ func ListMembers(ctx *context.APIContext) {
ctx.Error(http.StatusInternalServerError, "IsOrgMember", err)
return
}
publicOnly = !isMember
publicOnly = !isMember && !ctx.User.IsAdmin
}
listMembers(ctx, publicOnly)
}

@ -320,7 +320,7 @@ func GetTeamMembers(ctx *context.APIContext) {
if err != nil {
ctx.Error(http.StatusInternalServerError, "IsOrganizationMember", err)
return
} else if !isMember {
} else if !isMember && !ctx.User.IsAdmin {
ctx.NotFound()
return
}

Loading…
Cancel
Save