Restrict updateTeam access.

Decatur-Robotics · Feb 10, 2025 · 299f52e · 299f52e
1 parent 17d5a2b
commit 299f52e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/api/ClientApi.ts b/lib/api/ClientApi.ts
@@ -1936,7 +1936,7 @@ export default class ClientApi extends NextApiTemplate<ApiDependencies> {
 		Team
 	>({
 		isAuthorized: (req, res, deps, [newValues, teamId]) =>
-			AccessLevels.IfOnTeam(req, res, deps, teamId),
+			AccessLevels.IfTeamOwner(req, res, deps, teamId),
 		handler: async (
 			req,
 			res,