MirrorSave
/
budibase
mirror of https://github.com/Budibase/budibase.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2914 from Budibase/fix/tenant-check-fix 

Fixing tenancy check
This commit is contained in:
Michael Drury 2021-10-07 08:40:30 +01:00 committed by GitHub
parent 2a8d5814b1 be5f3a84ca
commit b6ee16404b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/server/src/middleware/currentapp.js
View File

@ -58,7 +58,7 @@ module.exports = async (ctx, next) => {
// If user and app tenant Ids do not match, 403
if (env.MULTI_TENANCY && ctx.user) {
const userTenantId = getTenantId()
const tenantId = getTenantIDFromAppID(ctx.appId) || DEFAULT_TENANT_ID
const tenantId = getTenantIDFromAppID(appId) || DEFAULT_TENANT_ID
if (tenantId !== userTenantId) {
ctx.throw(403, "Cannot access application.")
}