fixed auth.add_membership succeeding with invalid group_id/user_id
This commit is contained in:
@@ -4439,6 +4439,10 @@ class Auth(object):
|
|||||||
group_id = self.id_group(group_id) # interpret group_id as a role
|
group_id = self.id_group(group_id) # interpret group_id as a role
|
||||||
if not user_id and self.user:
|
if not user_id and self.user:
|
||||||
user_id = self.user.id
|
user_id = self.user.id
|
||||||
|
if not group_id:
|
||||||
|
raise ValueError('group_id not provided or invalid')
|
||||||
|
if not user_id:
|
||||||
|
raise ValueError('user_id not provided or invalid')
|
||||||
membership = self.table_membership()
|
membership = self.table_membership()
|
||||||
db = membership._db
|
db = membership._db
|
||||||
record = db((membership.user_id == user_id) &
|
record = db((membership.user_id == user_id) &
|
||||||
|
|||||||
Reference in New Issue
Block a user