Check permissions on current user during PDF report generation [SCI-7919]

This commit is contained in:
Oleksii Kriuchykhin 2023-03-22 10:51:45 +01:00
parent b3889de17b
commit ba5afe0e6b
2 changed files with 2 additions and 3 deletions

View file

@ -84,7 +84,6 @@ gem 'sneaky-save', git: 'https://github.com/einzige/sneaky-save'
gem 'turbolinks', '~> 5.1.1' gem 'turbolinks', '~> 5.1.1'
gem 'underscore-rails' gem 'underscore-rails'
gem 'wicked_pdf' gem 'wicked_pdf'
gem 'wkhtmltopdf-heroku', '2.12.5'
gem 'aws-sdk-lambda' gem 'aws-sdk-lambda'
gem 'aws-sdk-rails' gem 'aws-sdk-rails'

View file

@ -7,9 +7,9 @@ module ReportsHelper
def render_report_element(element, provided_locals = nil) def render_report_element(element, provided_locals = nil)
case element.type_of case element.type_of
when 'experiment' when 'experiment'
return unless can_read_experiment?(element.report.user, element.experiment) return unless can_read_experiment?(element.experiment)
when 'my_module' when 'my_module'
return unless can_read_my_module?(element.report.user, element.my_module) return unless can_read_my_module?(element.my_module)
end end
# Determine partial # Determine partial