diff --git a/app/controllers/repository_rows_controller.rb b/app/controllers/repository_rows_controller.rb index a2dfeb280..688fdea53 100644 --- a/app/controllers/repository_rows_controller.rb +++ b/app/controllers/repository_rows_controller.rb @@ -52,8 +52,7 @@ class RepositoryRowsController < ApplicationController def show @repository_row = RepositoryRow.find_by(id: params[:id]) - render_403 unless can_read_repository?(@repository_row.repository) - render_403 unless @repository_row.repository_id == params[:repository_id] + render_403 if !can_read_repository?(@repository_row.repository) || @repository_row.repository_id != params[:repository_id] @assigned_modules = @repository_row.my_modules.joins(experiment: :project) @viewable_modules = @assigned_modules.viewable_by_user(current_user, current_user.teams)