From aa931ddcbe0bec6a06fea08599699aca12361899 Mon Sep 17 00:00:00 2001
From: Henry <henry_ball@hotmail.co.uk>
Date: Fri, 26 Sep 2025 22:08:52 +0100
Subject: [PATCH] feat: only allow admin users to create links

---
 packages/api/src/routers/member.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/api/src/routers/member.ts b/packages/api/src/routers/member.ts
index 6ff21cf5..f36c277b 100644
--- a/packages/api/src/routers/member.ts
+++ b/packages/api/src/routers/member.ts
@@ -360,7 +360,7 @@ export const memberRouter = createTRPCRouter({
         });
 
       // Check if user is in workspace
-      await assertUserInWorkspace(ctx.db, userId, workspace.id);
+      await assertUserInWorkspace(ctx.db, userId, workspace.id, "admin");
 
       // Deactivate any existing active invite links
       await inviteLinkRepo.deactivateAllActiveForWorkspace(ctx.db, {