Fix permission check

This commit is contained in:
Urban Rotnik 2020-08-10 14:35:47 +02:00
parent 1080ad2821
commit e429c78d56

View file

@ -263,7 +263,7 @@ class SearchController < ApplicationController
def search_repository
@repository = Repository.find_by_id(params[:repository])
render_403 unless can_read_repository?(@repository)
render_403 unless user.teams.include?(repository.team) || repository.private_shared_with?(user.teams)
@repository_results = []
if @repository_search_count_total > 0
@repository_results =