tdpeuter/2025SELab2-project-Dwengo
tdpeuter/2025SELab2-project-Dwengo
1
Fork 0
Code Issues Releases 4 Packages 2 Wiki Activity

fix: verboden om PUT request naar group te sturen met studenten die niet tot klas behoren

Browse source
This commit is contained in:
Adriaan Jacquet 2025-04-22 14:21:25 +02:00
parent f1e9e3a8d6
commit 6fe20dc2fe
2 changed files with 25 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

6
backend/src/controllers/groups.ts
View file

@ -35,7 +35,11 @@ export async function putGroupHandler(req: Request, res: Response): Promise<void
const groupId = parseInt(req.params.groupid);
checkGroupFields(classId, assignmentId, groupId);
const group = await putGroup(classId, assignmentId, groupId, req.body as Partial<EntityDTO<Group>>);
// only members field can be changed
const members = req.body.members;
requireFields({ members });
const group = await putGroup(classId, assignmentId, groupId, { members } as Partial<GroupDTO>);
res.json({ group });
}