scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-11-10 00:11:22 +08:00
Code Issues Projects Releases Packages Wiki Activity

Fix permission check for inventory (#2039)

Browse source
This commit is contained in:
aignatov-bio 2019-09-09 15:11:18 +02:00 • committed by GitHub
parent 6a17667d39
commit 01d6a17f2b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/services/smart_annotations/permission_eval.rb
View file

@ -26,9 +26,7 @@ module SmartAnnotations
def validate_rep_item_permissions(user, team, object) def validate_rep_item_permissions(user, team, object)
if object.repository if object.repository
return (object.repository.team.id == team.id || return can_read_repository?(user, object.repository)
object.repository.team_repositories.where(team_id: team.id).any?) &&
can_read_repository?(user, object.repository)
end end
# handles discarded repositories # handles discarded repositories