realm: Only owners should be able to configure can_manage_all_groups.

This commit is contained in:
Shubham Padia
2024-09-13 18:37:43 +00:00
committed by Tim Abbott
parent 2b6414acfb
commit 91953eca28
2 changed files with 11 additions and 4 deletions

View File

@@ -230,6 +230,7 @@ def update_realm(
or invite_required is not None
or create_multiuse_invite_group_id is not None
or can_create_groups is not None
or can_manage_all_groups is not None
) and not user_profile.is_realm_owner:
raise OrganizationOwnerRequiredError