Fix storage layer order to expose redeem methods (#126)

appuio · Mar 14, 2023 · 56f2c83 · 56f2c83
1 parent 7d3adf6
commit 56f2c83
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/apiserver/user/invitation_storage.go b/apiserver/user/invitation_storage.go
@@ -36,15 +36,16 @@ func NewInvitationStorage(backingNS, usernamePrefix string) restbuilder.Resource
 			return nil, err
 		}
 
-		stor = &invitationRedeemer{
+		stor = &rbacCreatorIsOwner{
 			ScopedStandardStorage: stor,
 			client:                c,
-			usernamePrefix:        usernamePrefix,
 		}
 
-		stor = &rbacCreatorIsOwner{
+		// Warning: Should be the last storage layer before authorization since it expands the interface with the Connecter interface
+		stor = &invitationRedeemer{
 			ScopedStandardStorage: stor,
 			client:                c,
+			usernamePrefix:        usernamePrefix,
 		}
 
 		astor, err := authwrapper.NewAuthorizedStorage(stor, metav1.GroupVersionResource{