scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2024-12-29 03:35:25 +08:00
Code Issues Projects Releases Packages Wiki Activity

Add check for edit permission

Browse source
This commit is contained in:
Anton Ignatov 2019-06-20 09:43:23 +02:00
parent 6f1f6e297c
commit 3069ec8dd2
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/assets_controller.rb
View file

@ -14,7 +14,7 @@ class AssetsController < ApplicationController
before_action :load_vars, except: :create_wopi_file
before_action :check_read_permission, except: :file_present
before_action :check_edit_permission, only: :edit
before_action :check_edit_permission, only: %i(edit create_start_edit_image_activity)
def file_present
return render_403 unless @asset.team == current_team