fix: Admin Logic for event-type API endpoint (calcom#12482)

* Fix Admin logic * chore: fix prettier --------- Co-authored-by: Udit Takkar <[email protected]>
hm-edu · Nov 22, 2023 · 16c5b07 · 16c5b07
1 parent 48dde24
commit 16c5b07
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/apps/api/pages/api/event-types/_post.ts b/apps/api/pages/api/event-types/_post.ts
@@ -316,8 +316,13 @@ async function checkPermissions(req: NextApiRequest) {
       statusCode: 401,
       message: "ADMIN required for `userId`",
     });
+  if (!isAdmin && body.teamId)
+    throw new HttpError({
+      statusCode: 401,
+      message: "ADMIN required for `teamId`",
+    });
   /* Admin users are required to pass in a userId or teamId */
-  if (isAdmin && (!body.userId || !body.teamId))
+  if (isAdmin && !body.userId && !body.teamId)
     throw new HttpError({ statusCode: 400, message: "`userId` or `teamId` required" });
 }