Allow a user to remove their own role from a project (#3716)

Signed-off-by: Radoslav Dimitrov <[email protected]>
mindersec · Jun 26, 2024 · 6cc166f · 6cc166f
1 parent 6efa146
commit 6cc166f
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/internal/controlplane/handlers_authz.go b/internal/controlplane/handlers_authz.go
@@ -476,12 +476,6 @@ func (s *Server) RemoveRole(ctx context.Context, req *minder.RemoveRoleRequest)
 	entityCtx := engcontext.EntityFromContext(ctx)
 	targetProject := entityCtx.Project.ID
 
-	// Ensure user is not updating their own role
-	err := isUserSelfUpdating(ctx, sub, email)
-	if err != nil {
-		return nil, err
-	}
-
 	// Parse role (this also validates)
 	authzRole, err := authz.ParseRole(role)
 	if err != nil {