Browse Source

修复:非组织工作项不允许跨仓库通过commit操作

pull/347/head
yystopf 1 year ago
parent
commit
e7b5039eb6
1 changed files with 1 additions and 1 deletions
  1. +1
    -1
      app/jobs/change_issue_status_by_message_job.rb

+ 1
- 1
app/jobs/change_issue_status_by_message_job.rb View File

@@ -13,7 +13,6 @@ class ChangeIssueStatusByMessageJob < ApplicationJob


https = Net::HTTP.new(url.host, url.port)
https.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Cookie"] = "autologin_trustie=#{Token.get_or_create_permanent_login_token(user, 'autologin')&.value}"
response = https.request(request)
@@ -33,6 +32,7 @@ class ChangeIssueStatusByMessageJob < ApplicationJob
issue = project.issues.issue_issue.where(project_issues_index: issue_id).where.not(id: issue_id).take || Issue.issue_issue.find_by_id(issue_id)
next unless issue.present? # issue不存在 跳过
next if issue.project.present? && !issue.project.member?(user) # issue归属项目,用户没有修改issue的权限,跳过
next if issue.pm_project_id.nil? && project.id.to_i != issue.project&.id.to_i
next if issue.pm_project_id.present? && !get_pm_issue_data(user, project.owner, issue.pm_project_id, issue.id) # issue是组织下工作项,不具备组织的访问权限,跳过

issue_project = issue.project || Project.new(id: 0, user_id: 0, name: 'pm_mm', identifier: 'pm_mm', is_public:true)


Loading…
Cancel
Save