Browse Source

Merge pull request #2914 from Budibase/fix/tenant-check-fix

Fixing tenancy check
master
Michael Drury 5 years ago
committed by GitHub
parent
commit
70274321ec
  1. 2
      packages/server/src/middleware/currentapp.js

2
packages/server/src/middleware/currentapp.js

@ -58,7 +58,7 @@ module.exports = async (ctx, next) => {
// If user and app tenant Ids do not match, 403
if (env.MULTI_TENANCY && ctx.user) {
const userTenantId = getTenantId()
const tenantId = getTenantIDFromAppID(ctx.appId) || DEFAULT_TENANT_ID
const tenantId = getTenantIDFromAppID(appId) || DEFAULT_TENANT_ID
if (tenantId !== userTenantId) {
ctx.throw(403, "Cannot access application.")
}

Loading…
Cancel
Save