scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-02-25 00:03:27 +08:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #2464 from okriuchykhin/ok_SCI_4440

Browse source 
Fix file view permission check in inventories [SCI-4440]
This commit is contained in:
Alex Kriuchykhin 2020-03-12 12:47:40 +01:00 committed by GitHub
commit 4f0e2938c0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/concerns/active_storage/check_blob_permissions.rb
View file

@ -40,7 +40,7 @@ module ActiveStorage
render_403 unless can_read_experiment?(experiment) render_403 unless can_read_experiment?(experiment)
elsif asset.repository_cell elsif asset.repository_cell
repository = asset.repository_cell.repository_column.repository repository = asset.repository_cell.repository_column.repository
render_403 unless can_read_team?(repository.team) render_403 unless can_read_repository?(repository)
else else
render_403 render_403
end end