From 0ba6c06a2110a862f451a694cd9bc8289f3041cd Mon Sep 17 00:00:00 2001 From: Beverly Nguyen Date: Tue, 19 Aug 2025 12:08:04 -0700 Subject: [PATCH] Only the person who creates the folder and admin gets permissions --- app/template_folder/rest.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/app/template_folder/rest.py b/app/template_folder/rest.py index 846cb81ab..d44773329 100644 --- a/app/template_folder/rest.py +++ b/app/template_folder/rest.py @@ -60,7 +60,11 @@ def create_template_folder(service_id): except NoResultFound: raise InvalidRequest("parent_id not found", status_code=400) else: - users_with_permission = dao_get_active_service_users(service_id) + users_with_permission = [] + if data.get("created_by_id"): + creator = dao_get_service_user(data["created_by_id"], service_id) + if creator: + users_with_permission = [creator] template_folder = TemplateFolder( service_id=service_id, name=data["name"].strip(),