Do not allow to update the tenant of a project (#116)

Author: majst01

pkg/service/project.go

@@ -65,8 +65,15 @@ func (s *projectService) Create(ctx context.Context, req *v1.ProjectCreateReques
 	return project.NewProjectResponse(), err
 }
 func (s *projectService) Update(ctx context.Context, req *v1.ProjectUpdateRequest) (*v1.ProjectResponse, error) {
+	old, err := s.projectStore.Get(ctx, req.Project.Meta.Id)
+	if err != nil {
+		return nil, err
+	}
 	project := req.Project
-	err := s.projectStore.Update(ctx, project)
+	if old.TenantId != project.TenantId {
+		return nil, status.Error(codes.InvalidArgument, fmt.Sprintf("update tenant of project:%s is not allowed", project.Meta.Id))
+	}
+	err = s.projectStore.Update(ctx, project)
 	return project.NewProjectResponse(), err
 }
 func (s *projectService) Delete(ctx context.Context, req *v1.ProjectDeleteRequest) (*v1.ProjectResponse, error) {

pkg/service/project_test.go

@@ -113,6 +113,8 @@ func TestUpdateProject(t *testing.T) {
 		},
 	}
 
+	storageMock.On("Get", ctx, t1.Meta.Id).Return(t1, nil)
+
 	storageMock.On("Update", ctx, t1).Return(nil)
 	resp, err := ts.Update(ctx, tur)
 	require.NoError(t, err)