scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-01-06 15:40:31 +08:00
Code Issues Projects Releases Packages Wiki Activity

Fix for downloading assets not in current user team [SCI-9353]

Browse source
This commit is contained in:
Martin Artnik 2023-09-27 14:13:34 +02:00
parent 3ce0779663
commit 2edba4e188
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/assets_controller.rb
View file

@ -319,6 +319,8 @@ class AssetsController < ApplicationController
@asset = Asset.find_by(id: params[:id])
return render_404 unless @asset
current_user.permission_team = @asset.team
@assoc ||= @asset.step
@assoc ||= @asset.result
@assoc ||= @asset.repository_cell