diff --git a/app/dashboard/routes.py b/app/dashboard/routes.py index e36072f..7de0331 100644 --- a/app/dashboard/routes.py +++ b/app/dashboard/routes.py @@ -137,7 +137,8 @@ def index(): @bp.route('/switch-company/') @login_required def switch_company(company_id): - CompanyService.set_active_company(company_id) + if not CompanyService.switch_company(company_id): + abort(403) return redirect(url_for('dashboard.index')) diff --git a/app/services/company_service.py b/app/services/company_service.py index 78e4d23..78c6e53 100644 --- a/app/services/company_service.py +++ b/app/services/company_service.py @@ -54,3 +54,7 @@ class CompanyService: session['current_company_id'] = company.id except RuntimeError: pass + + @staticmethod + def set_active_company(company_id, user=None): + return CompanyService.switch_company(company_id, user=user) \ No newline at end of file