scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-09-11 07:34:41 +08:00
Code Issues Projects Releases Packages Wiki Activity

Fix team permission scope for service API [SCI-9611] (#6554)

Browse source
This commit is contained in:
ajugo 2023-10-30 12:54:55 +01:00 • committed by GitHub
parent c1e3472d46
commit e73543dd90
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
app/controllers/api/service/base_controller.rb
View file

@ -73,6 +73,7 @@ module Api
def load_team
@team = current_user.teams.find(params.require(:team_id))
current_user.permission_team = @team
raise PermissionError.new(Team, :read) unless can_read_team?(@team)
end