fix: add member.remove permission check

2026-03-12 12:13:14 +00:00
parent c695ef903f
commit 818dbf12b9
1 changed files with 1 additions and 1 deletions
--- a/app/api/routers/projects.py
+++ b/app/api/routers/projects.py
@@ -298,7 +298,7 @@ def remove_project_member(
    db: Session = Depends(get_db),
    current_user: models.User = Depends(get_current_user_or_apikey),
 ):
-    check_project_role(db, current_user.id, project_id, min_role="admin")
+    check_permission(db, current_user.id, project_id, "member.remove")
    member = db.query(models.ProjectMember).filter(
        models.ProjectMember.project_id == project_id, models.ProjectMember.user_id == user_id
    ).first()