Function require_org_membership

apps/api/src/security/org_auth.py:66–72

Raise 403 if user is not an org member and not a superadmin.

(user_id: int, org_id: int, db_session: AsyncSession)

async def require_org_membership(user_id: int, org_id: int, db_session: AsyncSession) -> None:
    """Raise 403 if user is not an org member and not a superadmin."""
    if not await is_org_member(user_id, org_id, db_session):
        raise HTTPException(
            status_code=status.HTTP_403_FORBIDDEN,
            detail="You are not a member of this organization",
        )


async def require_org_admin(user_id: int, org_id: int, db_session: AsyncSession) -> None: