scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2024-09-20 14:45:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix displaying of tinyMCE images in search results [SCI-8823] (#5751)

Browse source
This commit is contained in:
Alex Kriuchykhin 2023-07-11 14:47:15 +02:00 committed by GitHub
parent e24d5f13fc
commit b852cf92fe
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
app/controllers/concerns/active_storage/check_blob_permissions.rb
View file

@ -55,16 +55,17 @@ module ActiveStorage
def check_tinymce_asset_read_permissions(asset)
return render_403 unless asset
return true if asset.object.nil? && asset.team == current_team
current_user.permission_team = asset.team || current_team
case asset.object_type
when 'MyModule'
render_403 unless can_read_experiment?(asset.object.experiment)
render_403 unless can_read_my_module?(asset.object)
when 'Protocol'
render_403 unless can_read_protocol_in_module?(asset.object) ||
can_read_protocol_in_repository?(asset.object)
when 'ResultText'
render_403 unless can_read_experiment?(asset.object.result.my_module.experiment)
render_403 unless can_read_my_module?(asset.object.result.my_module)
when 'StepText'
render_403 unless can_read_protocol_in_module?(asset.object.step.protocol) ||
can_read_protocol_in_repository?(asset.object.step.protocol)