Skip to content

Commit

Permalink
fix: non-organizer user can't set email null (#7378)
Browse files Browse the repository at this point in the history
Co-authored-by: Areeb Jamal <[email protected]>
  • Loading branch information
maze-runnar and iamareebjamal authored Oct 26, 2020
1 parent eff7e73 commit dd0bd76
Showing 1 changed file with 11 additions and 5 deletions.
16 changes: 11 additions & 5 deletions app/api/speakers.py
Original file line number Diff line number Diff line change
Expand Up @@ -67,21 +67,27 @@ def before_post(self, args, kwargs, data=None):
raise ForbiddenError(
{'pointer': ''}, 'Speaker with this Email ID already exists'
)

if data.get('is_email_overridden') and not has_access(
'is_organizer', event_id=data['event']
is_organizer = has_access('is_organizer', event_id=data['event'])
if (
data.get('is_email_overridden') and not is_organizer
):
raise ForbiddenError(
{'pointer': 'data/attributes/is_email_overridden'},
'Organizer access required to override email',
)
if (
not data.get('is_email_overridden')
and has_access('is_organizer', event_id=data['event'])
and is_organizer
and not data.get('email')
):
data['email'] = current_user.email

if (
not is_organizer
and not data.get('email')
):
raise ForbiddenError(
{'pointer': '/data/email'}, 'Email is required for speaker'
)
if 'sessions' in data:
session_ids = data['sessions']
for session_id in session_ids:
Expand Down

0 comments on commit dd0bd76

Please sign in to comment.