Make sure users cannot revoke invites for other orgs

triggerdotdev · Jun 11, 2024 · 36ac79a · 36ac79a
1 parent ca94f0c
commit 36ac79a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/apps/webapp/app/models/member.server.ts b/apps/webapp/app/models/member.server.ts
@@ -245,6 +245,7 @@ export async function revokeInvite({
  const invite = await prisma.orgMemberInvite.delete({
  where: {
  id: inviteId,
+ organizationId: org.id,
  },
  select: {
  email: true,