Fix the scope required for /api/v1/orgs/{org}/teams

This commit is contained in:
harryzcy 2022-11-01 02:38:44 -04:00
parent 853eb68d23
commit 45f716f5c8
No known key found for this signature in database
GPG key ID: CC2953E050C19686

View file

@ -1129,9 +1129,9 @@ func Routes(ctx gocontext.Context) *web.Route {
})
m.Group("/teams", func() {
m.Get("", reqToken(auth_model.AccessTokenScopeReadOrg), org.ListTeams)
m.Post("", reqOrgOwnership(), bind(api.CreateTeamOption{}), org.CreateTeam)
m.Get("/search", org.SearchTeam)
}, reqToken(auth_model.AccessTokenScopeWriteOrg), reqOrgMembership())
m.Post("", reqToken(auth_model.AccessTokenScopeWriteOrg), reqOrgOwnership(), bind(api.CreateTeamOption{}), org.CreateTeam)
m.Get("/search", reqToken(auth_model.AccessTokenScopeReadOrg), org.SearchTeam)
}, reqOrgMembership())
m.Group("/labels", func() {
m.Get("", reqToken(auth_model.AccessTokenScopeReadOrg), org.ListLabels)
m.Post("", reqToken(auth_model.AccessTokenScopeWriteOrg), reqOrgOwnership(), bind(api.CreateLabelOption{}), org.CreateLabel)