SeedCompany / cord-api-v3

Bible translation project management API
MIT License
18 stars 4 forks source link

Fix permissions for `SessionOutput.impersonator` #3171

Closed CarsonF closed 5 months ago

CarsonF commented 5 months ago

We were using the impersonatee's perms to load the impersonator.

So when the impersonatee couldn't view the impersonator, the UI would not be able to stop impersonating because it didn't know the impersonator's roles (to conditionally show the toggle).

I think EdgeDB would've thrown a not found error here too.