diff options
author | Erik Johnston <erik@matrix.org> | 2017-07-18 16:51:25 +0100 |
---|---|---|
committer | Erik Johnston <erik@matrix.org> | 2017-07-18 16:51:25 +0100 |
commit | 6027b1992f507cb1a11836797827d9e69e2a6020 (patch) | |
tree | a03a7b31ef18899fbd30d026122c386e8d7aba39 | |
parent | Add DELETE (diff) | |
download | synapse-6027b1992f507cb1a11836797827d9e69e2a6020.tar.xz |
Fix permissions
-rw-r--r-- | synapse/groups/groups_server.py | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/synapse/groups/groups_server.py b/synapse/groups/groups_server.py index c8559577f7..b9ad9507f4 100644 --- a/synapse/groups/groups_server.py +++ b/synapse/groups/groups_server.py @@ -293,7 +293,9 @@ class GroupsServerHandler(object): content): """Add/update a users entry in the group summary """ - yield self.check_group_is_ours(group_id, and_exists=True, and_is_admin=user_id) + yield self.check_group_is_ours( + group_id, and_exists=True, and_is_admin=requester_user_id, + ) order = content.get("order", None) @@ -313,7 +315,9 @@ class GroupsServerHandler(object): def delete_group_summary_user(self, group_id, requester_user_id, user_id, role_id): """Remove a user from the group summary """ - yield self.check_group_is_ours(group_id, and_exists=True, and_is_admin=user_id) + yield self.check_group_is_ours( + group_id, and_exists=True, and_is_admin=requester_user_id, + ) yield self.store.remove_user_from_summary( group_id=group_id, |