scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-09-12 08:04:34 +08:00
Code Issues Projects Releases Packages Wiki Activity

Fix view permission for protocol template [SCI-11256]

Browse source
This commit is contained in:
Anton 2024-11-12 13:16:17 +01:00
parent 19aa77f14a
commit aceeaae49c
1 changed files with 14 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
app/controllers/protocols_controller.rb
View file

@ -18,11 +18,13 @@ class ProtocolsController < ApplicationController
print
versions_modal
protocol_status_bar
linked_children
linked_children_datatable
versions_list
permissions
)
before_action :check_linked_protocol_view_permissions, only: %i(
linked_children
linked_children_datatable
)
before_action :switch_team_with_param, only: %i(index protocolsio_index)
before_action :check_view_all_permissions, only: %i(
index
@ -933,6 +935,16 @@ class ProtocolsController < ApplicationController
end
def check_view_permissions
@protocol = Protocol.find_by(id: params[:id])
current_team_switch(@protocol.team) if current_team != @protocol.team
unless @protocol.present? &&
(can_read_protocol_in_module?(@protocol) ||
can_read_protocol_in_repository?(@protocol))
render_403
end
end
def check_linked_protocol_view_permissions
@protocol = Protocol.find_by(id: params[:id])
current_team_switch(@protocol.team) if current_team != @protocol.team
unless @protocol.present? &&