diff --git a/packages/server/src/services/permission.ts b/packages/server/src/services/permission.ts index e32f3dae4..3ce61f6ed 100644 --- a/packages/server/src/services/permission.ts +++ b/packages/server/src/services/permission.ts @@ -80,9 +80,10 @@ export const checkPermission = async ( const { id: userId } = ctx.user; const { activeOrganizationId: organizationId } = ctx.session; const memberRecord = await findMemberByUserId(userId, organizationId); - const isStaticRole = memberRecord.role in staticRoles; - if (isStaticRole) { + const isPrivilegedStaticRole = + memberRecord.role === "owner" || memberRecord.role === "admin"; + if (isPrivilegedStaticRole) { const allEnterprise = Object.keys(permissions).every((r) => enterpriseOnlyResources.has(r), );