#106 Fix oganization check on user update

TheHive-Project · May 25, 2018 · 8ea207a · 8ea207a
1 parent 50ab549
commit 8ea207a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/org/thp/cortex/controllers/UserCtrl.scala b/app/org/thp/cortex/controllers/UserCtrl.scala
@@ -98,7 +98,7 @@ class UserCtrl @Inject() (
           case _                                          ⇒ Future.failed(AuthorizationError("You can't give superadmin right to an user"))
         }
         // check organization
-        _ ← if (!fields.contains("organization")) Future.successful(()) else Future.failed(AuthorizationError("You can't move an user to another organization"))
+        _ ← if (fields.getString("organization").fold(true)(_ == targetUserOrganization)) Future.successful(()) else Future.failed(AuthorizationError("You can't move an user to another organization"))
       } yield ()
     }