fix: ensure resource owner in update human profile (#6253)

(cherry picked from commit 13e284dd56)
This commit is contained in:
Livio Spring 2023-07-21 15:42:24 +02:00
parent fa7f139645
commit bdecf90d6e
No known key found for this signature in database
GPG Key ID: 26BB1C2FA5952CF0
2 changed files with 3 additions and 3 deletions

View File

@ -421,7 +421,7 @@ func (s *Server) GetHumanProfile(ctx context.Context, req *mgmt_pb.GetHumanProfi
}
func (s *Server) UpdateHumanProfile(ctx context.Context, req *mgmt_pb.UpdateHumanProfileRequest) (*mgmt_pb.UpdateHumanProfileResponse, error) {
profile, err := s.command.ChangeHumanProfile(ctx, UpdateHumanProfileRequestToDomain(req))
profile, err := s.command.ChangeHumanProfile(ctx, UpdateHumanProfileRequestToDomain(req, authz.GetCtxData(ctx).OrgID))
if err != nil {
return nil, err
}

View File

@ -146,11 +146,11 @@ func AddMachineUserRequestToCommand(req *mgmt_pb.AddMachineUserRequest, resource
}
}
func UpdateHumanProfileRequestToDomain(req *mgmt_pb.UpdateHumanProfileRequest) *domain.Profile {
func UpdateHumanProfileRequestToDomain(req *mgmt_pb.UpdateHumanProfileRequest, orgID string) *domain.Profile {
preferredLanguage, err := language.Parse(req.PreferredLanguage)
logging.Log("MANAG-GPcYv").OnError(err).Debug("language malformed")
return &domain.Profile{
ObjectRoot: models.ObjectRoot{AggregateID: req.UserId},
ObjectRoot: models.ObjectRoot{AggregateID: req.UserId, ResourceOwner: orgID},
FirstName: req.FirstName,
LastName: req.LastName,
NickName: req.NickName,