Files
dashback/docs/api/routes/companyuser/update.md
2026-11-02 00:19:19 +01:00

1.2 KiB

PATCH /companyuser/{id}

Protected. Requires a valid session cookie (credentials: 'include').

Change a company user's role

Changes the role of a member of the selected company. The last admin cannot be demoted. Admin only.

Path parameters

Param Required Type Description
id yes integer

Body (JSON)

Field Required Type Description
role yes string
{
  "role": "admin"
}

Signals

On success, emits SSE signal: companyuser (see GET /events).

Response 200

Updated company user

{
  "companyuser": {
    "id": 1,
    "googleAuthId": 1,
    "role": "admin"
  }
}

Errors

Status Description
400 Invalid id, role or no company selected — {"error":"…"}
401 Unauthorized — {"error":"…"}
403 Not authorized (admin of the selected company required) — {"error":"…"}
404 Company user not found — {"error":"…"}
409 Cannot demote the last admin — {"error":"…"}

Generated from @openapi JSDoc. Do not edit by hand — run npm run docs:api.