rust/hyperswitch
1
0
Fork 0
mirror of https://github.com/juspay/hyperswitch.git synced 2025-11-02 21:07:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(user_roles): Send only same and below Entity Level Users in List Users API (#6147)

Browse Source
This commit is contained in:
Mani Chandra
2024-09-29 18:20:22 +05:30
committed by GitHub
parent 34a1e2a840
commit 3e3c3261c3
2 changed files with 21 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
crates/router/src/utils/user_role.rs
View File

@ -1,4 +1,4 @@
use std::collections::HashSet;
use std::{cmp, collections::HashSet};
use api_models::user_role as user_role_api;
use common_enums::{EntityType, PermissionGroup};
@ -418,28 +418,16 @@ pub fn get_min_entity(
user_entity: EntityType,
filter_entity: Option<EntityType>,
) -> UserResult<EntityType> {
match (user_entity, filter_entity) {
(EntityType::Organization, None)
| (EntityType::Organization, Some(EntityType::Organization)) => {
Ok(EntityType::Organization)
}
let Some(filter_entity) = filter_entity else {
return Ok(user_entity);
};
(EntityType::Merchant, None)
| (EntityType::Organization, Some(EntityType::Merchant))
| (EntityType::Merchant, Some(EntityType::Merchant)) => Ok(EntityType::Merchant),
(EntityType::Profile, None)
| (EntityType::Organization, Some(EntityType::Profile))
| (EntityType::Merchant, Some(EntityType::Profile))
| (EntityType::Profile, Some(EntityType::Profile)) => Ok(EntityType::Profile),
(EntityType::Merchant, Some(EntityType::Organization))
| (EntityType::Profile, Some(EntityType::Organization))
| (EntityType::Profile, Some(EntityType::Merchant)) => {
Err(report!(UserErrors::InvalidRoleOperation)).attach_printable(format!(
"{} level user requesting data for {:?} level",
user_entity, filter_entity
))
}
if user_entity < filter_entity {
return Err(report!(UserErrors::InvalidRoleOperation)).attach_printable(format!(
"{} level user requesting data for {:?} level",
user_entity, filter_entity
));
}
Ok(cmp::min(user_entity, filter_entity))
}