only allow admins to create orgs (follows what the frontend does)

sillsdev · Oct 29, 2024 · a84c509 · a84c509
1 parent 42c8b7f
commit a84c509
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/backend/LexBoxApi/Services/PermissionService.cs b/backend/LexBoxApi/Services/PermissionService.cs
@@ -196,10 +196,15 @@ public void AssertHasProjectRequestPermission()
         if (!HasProjectRequestPermission()) throw new UnauthorizedAccessException();
     }
 
+    public bool CanCreateOrg()
+    {
+        return User is {Role: UserRole.admin};
+    }
+
     public void AssertCanCreateOrg()
     {
         //todo adjust permission
-        if (!HasProjectCreatePermission()) throw new UnauthorizedAccessException();
+        if (!CanCreateOrg()) throw new UnauthorizedAccessException();
     }
 
     public bool IsOrgMember(Guid orgId)