Merge pull request #19684 from overleaf/ae-members-list

Allow all collaborators to access the project `members` endpoint

GitOrigin-RevId: 2e5911146c61f368f85e6b57a9c5f12a35e7b294
This commit is contained in:
Alf Eaton 2024-08-07 08:57:37 +01:00 committed by Copybot
parent 5067c0b22d
commit 049f8af680

View file

@ -68,7 +68,8 @@ module.exports = {
webRouter.get(
'/project/:Project_id/members',
AuthenticationController.requireLogin(),
AuthorizationMiddleware.ensureUserCanAdminProject,
AuthorizationMiddleware.blockRestrictedUserFromProject,
AuthorizationMiddleware.ensureUserCanReadProject,
CollaboratorsController.getAllMembers
)