sec_training_code

Access to an organization's FTP credentials
Before:
        async sftpCredentials(args: any, ctx: Context) {
          return ctx.loaders.FeatureCredentials.getSftpCredentials(args.orgUuid, 'auto-messaging');
        },

After
        async sftpCredentials(args: any, ctx: Context) {
          // We need to have an authenticated user who is an admin for the org uuid
          // See https://app.asana.com/0/1142193044639890/1201986092349803/f
          const authenticatedAdmin = await isCurrentUserAnAdminForOrg(ctx, args.orgUuid);
          if (!authenticatedAdmin) {
            // this field is required to be a list.  For an unauthenticated request, just return an empty list.
            return [];
          }

          return ctx.loaders.FeatureCredentials.getSftpCredentials(args.orgUuid, 'auto-messaging');
        },