Restrict team owner assignment to admins

2026-06-02 22:17:10 -07:00
parent 44c6b4427f
commit 5bf1792b38
1 changed files with 1 additions and 1 deletions
@@ -47,7 +47,7 @@ export async function POST(request: Request) {
  const { name, ownerId } = body;

  const teamId = uuid();
-  const teamOwnerId = ownerId ?? auth.user.id;
+  const teamOwnerId = ownerId && auth.user.isAdmin ? ownerId : auth.user.id;

  const team = await createTeam(
    {