fix(functions): fix permissions for function domains

Execution via domain should be blocked if permissions does not contain
any and permissions does not contain guests.
This commit is contained in:
Steven Nguyen 2024-03-20 15:49:05 +00:00 committed by GitHub
parent ac397935a1
commit 47f442b98e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -167,7 +167,7 @@ function router(App $utopia, Database $dbForConsole, callable $getProjectDB, Swo
$permissions = $function->getAttribute('execute');
if (!(\in_array('any', $permissions)) && (\in_array('guests', $permissions))) {
if (!(\in_array('any', $permissions)) && !(\in_array('guests', $permissions))) {
throw new AppwriteException(AppwriteException::USER_UNAUTHORIZED, 'To execute function using domain, execute permissions must include "any" or "guests"');
}