fix admin check (#12175)

2023-11-02 12:29:15 +00:00
parent d8356e9a5b
commit d4d96eb5cd
1 changed files with 3 additions and 2 deletions
@@ -316,8 +316,9 @@ async function checkPermissions(req: NextApiRequest) {
      statusCode: 401,
      message: "ADMIN required for `userId`",
    });
-  /* Admin users are required to pass in a userId */
-  if (isAdmin && !body.userId) throw new HttpError({ statusCode: 400, message: "`userId` required" });
+  /* Admin users are required to pass in a userId or teamId */
+  if (isAdmin && (!body.userId || !body.teamId))
+    throw new HttpError({ statusCode: 400, message: "`userId` or `teamId` required" });
 }

 export default defaultResponder(postHandler);