Fix active user issue for projects

genouest · Feb 6, 2024 · 8ae6d92 · 8ae6d92
1 parent 06469d0
commit 8ae6d92
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/core/user.service.js b/core/user.service.js
@@ -41,6 +41,7 @@ exports.remove_user_from_project = remove_user_from_project;
 exports.activate_user = activate_user;
 exports.new_password = new_password;
 exports.new_random = new_random;
+exports.is_active = is_active;
 
 function new_random(len=16) {
     return crypto.randomBytes(32).toString('hex').slice(0,len);
@@ -59,6 +60,10 @@ function new_password(len=16) {
     });
 }
 
+function is_active(user){
+    return user.status === STATUS_ACTIVE;
+}
+
 // module functions
 function get_user_home(user) {
     if (!user.uid || user.uid.length <= 1) {

diff --git a/routes/projects.js b/routes/projects.js
@@ -136,6 +136,12 @@ router.post('/project', async function(req, res){
         res.status(404).send({message: 'Owner not found'});
         return;
     }
+
+    if (!usrsrv.is_active(owner)) {
+        res.status(403).send({message: 'Owner account is not active'});
+        return;
+    }
+
     let project = await dbsrv.mongo_projects().findOne({'id': req.body.id});
     if(project){
         res.status(403).send({message: 'Not authorized or project already exists'});