From e5035f96e18423f930943528047deb51ee4a063e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ivar=20Conradi=20=C3=98sthus?= <ivarconr@gmail.com>
Date: Tue, 1 Feb 2022 22:58:52 +0100
Subject: [PATCH] fix: rbac should pick up projectId from path if available

---
 src/lib/middleware/rbac-middleware.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/middleware/rbac-middleware.ts b/src/lib/middleware/rbac-middleware.ts
index 117d104886..081dda3c1f 100644
--- a/src/lib/middleware/rbac-middleware.ts
+++ b/src/lib/middleware/rbac-middleware.ts
@@ -53,7 +53,7 @@ const rbacMiddleware = (
                 const { featureName } = params;
                 projectId = await featureToggleStore.getProjectId(featureName);
             } else if (permission === CREATE_FEATURE) {
-                projectId = req.body.project || 'default';
+                projectId = projectId || req.body.project || 'default';
             }
 
             return accessService.hasPermission(