permission: added check to ensure that network admin org cannot be deactivated

This commit is contained in:
vsmk98 2019-05-22 18:34:59 +08:00
parent d31a747192
commit 57c7b2c37b
1 changed files with 5 additions and 0 deletions

View File

@ -548,6 +548,11 @@ func (q *QuorumControlsAPI) valUpdateOrgStatus(args txArgs, pinterf *pbind.PermI
if args.action != 1 && args.action != 2 { if args.action != 1 && args.action != 2 {
return ErrOpNotAllowed return ErrOpNotAllowed
} }
//check if passed org id is network admin org. update should not be allowed
if args.orgId == q.permConfig.NwAdminOrg {
return ErrOpNotAllowed
}
// check if status update can be performed. Org should be approved for suspension // check if status update can be performed. Org should be approved for suspension
if execStatus, er := q.checkOrgStatus(args.orgId, args.action); er != nil { if execStatus, er := q.checkOrgStatus(args.orgId, args.action); er != nil {
return execStatus return execStatus