Merge pull request #13584 from overleaf/bg-managed-users-block-delete-own-account

block account deletion by managed users

GitOrigin-RevId: 895e5e31951bf60cfade4cf7acc3ef330df214e6
This commit is contained in:
Brian Gough
2023-07-05 09:53:48 +01:00
committed by Copybot
parent 7f7f48ce91
commit b111e5a59f
8 changed files with 84 additions and 9 deletions
@@ -194,6 +194,11 @@ async function ensureAffiliationMiddleware(req, res, next) {
} catch (error) {
return new Errors.UserNotFoundError({ info: { userId } })
}
try {
req.assertPermission('add-affiliation')
} catch (error) {
return next(error)
}
try {
await ensureAffiliation(user)
} catch (error) {