ensure organization id matches slug

Netflix · Jan 16, 2025 · 671c177 · 671c177
1 parent 6431560
commit 671c177
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/dispatch/auth/permissions.py b/src/dispatch/auth/permissions.py
@@ -86,6 +86,13 @@ def __init__(self, request: Request):
         if not organization:
             raise HTTPException(status_code=self.org_error_code, detail=self.org_error_msg)
 
+        org_check = organization_service.get_by_slug(
+            db_session=request.state.db, slug=organization.slug
+        )
+
+        if not org_check or org_check.id != organization.id:
+            raise HTTPException(status_code=self.org_error_code, detail=self.org_error_msg)
+
         user = get_current_user(request=request)
         if not user:
             raise HTTPException(status_code=self.user_error_code, detail=self.user_error_msg)