Skip to content

Commit 0ba6c06

Browse files
committed
Only the person who creates the folder and admin gets permissions
1 parent 5441965 commit 0ba6c06

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

app/template_folder/rest.py

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,11 @@ def create_template_folder(service_id):
6060
except NoResultFound:
6161
raise InvalidRequest("parent_id not found", status_code=400)
6262
else:
63-
users_with_permission = dao_get_active_service_users(service_id)
63+
users_with_permission = []
64+
if data.get("created_by_id"):
65+
creator = dao_get_service_user(data["created_by_id"], service_id)
66+
if creator:
67+
users_with_permission = [creator]
6468
template_folder = TemplateFolder(
6569
service_id=service_id,
6670
name=data["name"].strip(),

0 commit comments

Comments
 (0)