Merge pull request #6288 from rekonder/aj_SCI_9367

Fix comment permission check [SCI-9367]
This commit is contained in:
Alex Kriuchykhin 2023-09-25 17:14:29 +02:00 committed by GitHub
commit 2771c04257
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -112,6 +112,6 @@ class CommentsController < ApplicationController
end
def check_manage_permissions
comment_editable?(@comment)
render_403 unless comment_editable?(@comment)
end
end