From ee5946c4b90e275160ddf98a107542a6b567700d Mon Sep 17 00:00:00 2001 From: Chad Scharf <3904944+cscharf@users.noreply.github.com> Date: Fri, 17 Jun 2022 11:04:25 -0400 Subject: [PATCH] EC-262 - add missing validation on deactivate (#2064) --- src/Core/Services/Implementations/OrganizationService.cs | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/Core/Services/Implementations/OrganizationService.cs b/src/Core/Services/Implementations/OrganizationService.cs index ae4ab7b329..1080b94212 100644 --- a/src/Core/Services/Implementations/OrganizationService.cs +++ b/src/Core/Services/Implementations/OrganizationService.cs @@ -2244,6 +2244,11 @@ namespace Bit.Core.Services { try { + if (organizationUser.Status == OrganizationUserStatusType.Deactivated) + { + throw new BadRequestException("Already deactivated."); + } + if (disablingUserId.HasValue && organizationUser.UserId == disablingUserId) { throw new BadRequestException("You cannot deactivate yourself.");