From ae013b6fa8c5ede01d3a52215c5060b91decb75f Mon Sep 17 00:00:00 2001 From: Miha Mencin Date: Thu, 6 Aug 2020 14:06:23 +0200 Subject: [PATCH] join two renders --- app/controllers/repository_rows_controller.rb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/app/controllers/repository_rows_controller.rb b/app/controllers/repository_rows_controller.rb index a2dfeb280..688fdea53 100644 --- a/app/controllers/repository_rows_controller.rb +++ b/app/controllers/repository_rows_controller.rb @@ -52,8 +52,7 @@ class RepositoryRowsController < ApplicationController def show @repository_row = RepositoryRow.find_by(id: params[:id]) - render_403 unless can_read_repository?(@repository_row.repository) - render_403 unless @repository_row.repository_id == params[:repository_id] + render_403 if !can_read_repository?(@repository_row.repository) || @repository_row.repository_id != params[:repository_id] @assigned_modules = @repository_row.my_modules.joins(experiment: :project) @viewable_modules = @assigned_modules.viewable_by_user(current_user, current_user.teams)