From ab2eb423fb6638e60e1a98020e34d2a0b55146f7 Mon Sep 17 00:00:00 2001 From: Marc Farra Date: Thu, 5 May 2022 23:44:30 +0300 Subject: [PATCH] Fix for org/teams API permissions --- app/manage/index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/manage/index.js b/app/manage/index.js index a64111af..fe4cf88a 100644 --- a/app/manage/index.js +++ b/app/manage/index.js @@ -151,7 +151,7 @@ function manageRouter (nextApp) { router.put('/api/organizations/:id/removeManager/:osmId', can('organization:edit'), removeManager) router.post('/api/organizations/:id/teams', can('organization:create-team'), createOrgTeam) - router.get('/api/organizations/:id/teams', getOrgTeams) + router.get('/api/organizations/:id/teams', can('organization:view-members'), getOrgTeams) /** * Manage organization badges