Browse Source

fix: operate issue permission reset

tags/v4.0.0^2
yystopf 4 years ago
parent
commit
4432e65683
1 changed files with 2 additions and 1 deletions
  1. +2
    -1
      app/controllers/issues_controller.rb

+ 2
- 1
app/controllers/issues_controller.rb View File

@@ -486,7 +486,8 @@ class IssuesController < ApplicationController
end

def operate_issue_permission
return render_forbidden("您没有权限进行此操作.") unless current_user.present? && current_user.logged? && (current_user.admin? || @project.member?(current_user) || @project.is_public?)
set_issue unless @issue.present?
return render_forbidden("您没有权限进行此操作.") unless current_user.present? && current_user.logged? && (current_user.admin? || @project.member?(current_user) || (@project.is_public && @issue.nil?) || (@project.is_public && @issue.present? && @issue.author_id == current_user.id))
end

def export_issues(issues)


Loading…
Cancel
Save