Bug fix: user permission check

Description

Users should be able to edit their own contact info, unless that info is associated with an integration (e.g. microsoft teams). At the moment, users are prevent from editing such info, but nothing is preventing them from removing the integration tag and then editing. We are correcting this behavior.

Change Category

API

Change Context

Bug fix.

Change Impact

Users will no longer be able to remove integration tags from their contact info unless they have the user edit permission.

Date of Change

No sooner than Aug 16, 2023

Impacted APIs

POST /api/v2/users
PUT /api/v2/users/{userId}/profile <<<< this is an undocumented endpoint that should not be used in any case

References

[PLUS-775]

This topic was automatically closed 62 days after the last reply. New replies are no longer allowed.