catalog: check vsets can be created by study admins, #TASK-7004

opencb · Oct 17, 2024 · bebdccb · bebdccb
1 parent 4536689
commit bebdccb
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.../main/java/org/opencb/opencga/catalog/auth/authorization/CatalogAuthorizationManager.java b/.../main/java/org/opencb/opencga/catalog/auth/authorization/CatalogAuthorizationManager.java
@@ -239,8 +239,8 @@ public void checkCanAssignOrSeePermissions(String organizationId, long studyId,
 
     @Override
     public void checkCanCreateUpdateDeleteVariableSets(String organizationId, long studyId, String userId) throws CatalogException {
-        if (!isAtLeastOrganizationOwnerOrAdmin(organizationId, userId)) {
-            throw CatalogAuthorizationException.notOrganizationOwnerOrAdmin("create, update or delete variable sets.");
+        if (!isAtLeastStudyAdministrator(organizationId, studyId, userId)) {
+            throw CatalogAuthorizationException.notStudyAdmin("create, update or delete variable sets.");
         }
     }