fix(workspaces): backend validation on workspace settings fields (#2584)

* fix(workspaces): backend validation on workspace settings fields * chore(workspaces): move authz to resolver level
2024-08-06 11:25:19 +01:00
parent fbfaa281dc
commit 97b44bad94
3 changed files with 72 additions and 35 deletions
@@ -153,6 +153,13 @@ export = FF_WORKSPACES_MODULE_ENABLED
        update: async (_parent, args, context) => {
          const { id: workspaceId, ...workspaceInput } = args.input

+          await authorizeResolver(
+            context.userId!,
+            workspaceId,
+            Roles.Workspace.Admin,
+            context.resourceAccessRules
+          )
+
          const updateWorkspace = updateWorkspaceFactory({
            getWorkspace: getWorkspaceFactory({ db }),
            upsertWorkspace: upsertWorkspaceFactory({ db }),
@@ -161,9 +168,7 @@ export = FF_WORKSPACES_MODULE_ENABLED

          const workspace = await updateWorkspace({
            workspaceId,
-            workspaceInput,
-            workspaceUpdaterId: context.userId!,
-            updaterResourceAccessLimits: context.resourceAccessRules
+            workspaceInput
          })

          return workspace