groups: members cannot be set for external groups

2024-01-19 22:48:29 +01:00
parent a1217e52c8
commit 8bdcdd7810
8 changed files with 108 additions and 50 deletions
@@ -170,7 +170,7 @@ async function setGroups(req, res, next) {
    if (!Array.isArray(req.body.groupIds)) return next(new HttpError(400, 'API call requires a groups array.'));
    if (users.compareRoles(req.user.role, req.resource.role) < 0) return next(new HttpError(403, `role '${req.resource.role}' is required but user has only '${req.user.role}'`));

-    const [error] = await safe(groups.setMembership(req.resource.id, req.body.groupIds));
+    const [error] = await safe(groups.setMembership(req.resource, req.body.groupIds));
    if (error) return next(BoxError.toHttpError(error));

    next(new HttpSuccess(204));