mirror of
https://github.com/GSA/notifications-api.git
synced 2026-08-24 08:16:19 -04:00
Only the person who creates the folder and admin gets permissions
This commit is contained in:
@@ -60,7 +60,11 @@ def create_template_folder(service_id):
|
|||||||
except NoResultFound:
|
except NoResultFound:
|
||||||
raise InvalidRequest("parent_id not found", status_code=400)
|
raise InvalidRequest("parent_id not found", status_code=400)
|
||||||
else:
|
else:
|
||||||
users_with_permission = dao_get_active_service_users(service_id)
|
users_with_permission = []
|
||||||
|
if data.get("created_by_id"):
|
||||||
|
creator = dao_get_service_user(data["created_by_id"], service_id)
|
||||||
|
if creator:
|
||||||
|
users_with_permission = [creator]
|
||||||
template_folder = TemplateFolder(
|
template_folder = TemplateFolder(
|
||||||
service_id=service_id,
|
service_id=service_id,
|
||||||
name=data["name"].strip(),
|
name=data["name"].strip(),
|
||||||
|
|||||||
Reference in New Issue
Block a user