From fe058bf8179ba279ccf25318f99d21abd825537a Mon Sep 17 00:00:00 2001
From: kelson <kelson@shysecurity.com>
Date: Wed, 17 Aug 2016 17:17:34 -0400
Subject: [PATCH] fixed auth.add_membership succeeding with invalid
 group_id/user_id

---
 gluon/tools.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/gluon/tools.py b/gluon/tools.py
index f88a01bc..e0838f9f 100644
--- a/gluon/tools.py
+++ b/gluon/tools.py
@@ -4439,6 +4439,10 @@ class Auth(object):
             group_id = self.id_group(group_id)  # interpret group_id as a role
         if not user_id and self.user:
             user_id = self.user.id
+        if not group_id:
+            raise ValueError('group_id not provided or invalid')
+        if not user_id:
+            raise ValueError('user_id not provided or invalid')
         membership = self.table_membership()
         db = membership._db
         record = db((membership.user_id == user_id) &