added validation rule that creator of developer collective cannot cre…

…ate permission for themselves
lightningrodlabs · Apr 23, 2024 · f586be1 · f586be1
1 parent a6eb5bc
commit f586be1
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/dnas/tools/zomes/integrity/library/src/contributor_permission.rs b/dnas/tools/zomes/integrity/library/src/contributor_permission.rs
@@ -19,6 +19,14 @@ pub fn validate_create_contributor_permission(
             ),
         );
     }
+    if record.action().author() == &contributor_permission.for_agent {
+        return Ok(
+            ValidateCallbackResult::Invalid(
+                "The creator has already full owner permissions and cannot issue a contributor permission for themselves."
+                    .into(),
+            ),
+        );
+    }
     let _developer_collective: crate::DeveloperCollective = record
         .entry()
         .to_app_option()