fix attachment_candown

app/controllers/attachments_controller.rb

@@ -229,7 +229,7 @@ class AttachmentsController < ApplicationController
         end
         tip_exception(403, "您没有权限进入") if project.present? && !candown
       end
-      tip_exception(403, "您没有权限查看") if project.present? && !candown if @file.is_public == 0 &&  author_id != current_user.id
+      tip_exception(403, "您没有权限查看") if @file.is_public == 0 &&  @file.author_id != current_user.id
     end
   end