fix: cannot install other tenant app

pull/182/head
John Wang 3 years ago
parent e00f56fdb4
commit d248d44324

@ -69,16 +69,18 @@ class InstalledAppsListApi(Resource):
parser.add_argument('app_id', type=str, required=True, help='Invalid app_id')
args = parser.parse_args()
recommended_app = RecommendedApp.query.filter(RecommendedApp.app_id == args['app_id']).first()
if recommended_app is None:
abort(404, message='App not found')
current_tenant_id = current_user.current_tenant_id
app = db.session.query(App).filter(
App.id == args['app_id'],
App.tenant_id == current_tenant_id
App.id == args['app_id']
).first()
if app is None:
abort(404, message='App not found')
recommended_app = RecommendedApp.query.filter(RecommendedApp.app_id == args['app_id']).first()
if recommended_app is None:
abort(404, message='App not found')
if not app.is_public:
abort(403, message="You can't install a non-public app")

Loading…
Cancel
Save