Skip to content

When creating a template, check authorization to determine the organizations where a user can create a template #14004

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
jaaydenh opened this issue Jul 24, 2024 · 0 comments · Fixed by #14174
Closed

When creating a template, check authorization to determine the organizations where a user can create a template #14004

jaaydenh opened this issue Jul 24, 2024 · 0 comments · Fixed by #14174
Assignees
@aslilac
Labels
site Area: frontend dashboard
Milestone
Organizations & C...

Comments

@jaaydenh
Copy link
Contributor

jaaydenh commented Jul 24, 2024 •
edited by Emyrk
Loading

The create template "organization dropdown" currently lists all organizations that can be read. This list would include organizations even if the actor in question is unable to create a template in said org.

The user would fill out the template form, only to receive a 401 Forbidden. The dropdown should omit organizations that are forbidden. Forbidden in this case means the user is not allowed to create a template in the organization selected.
@coder-labeler coder-labeler bot added feature site Area: frontend dashboard labels Jul 24, 2024
@jaaydenh jaaydenh added this to the Organizations & Custom Roles milestone Jul 24, 2024
@jaaydenh jaaydenh changed the title When creating an template, check authorization to determine the organizations a user can create a template When creating an template, check authorization to determine the organizations where a user can create a template Jul 24, 2024
@Kira-Pilot Kira-Pilot changed the title When creating an template, check authorization to determine the organizations where a user can create a template When creating a template, check authorization to determine the organizations where a user can create a template Jul 24, 2024
@Kira-Pilot Kira-Pilot assigned jaaydenh and aslilac and unassigned Emyrk and jaaydenh Jul 24, 2024
@aslilac aslilac mentioned this issue Aug 5, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@aslilac aslilac

Labels
site Area: frontend dashboard
Projects
None yet
Milestone
Organizations & Custom Roles (GA)
Development

Successfully merging a pull request may close this issue.

fix: only show valid organizations in CreateTemplateForm coder/coder
3 participants
@aslilac @jaaydenh @Emyrk