fix attachment_candown

This commit is contained in:
呱呱呱 2023-10-18 13:38:09 +08:00
parent 2c4253b04b
commit 93dc10b6a5
1 changed files with 1 additions and 1 deletions

View File

@ -229,7 +229,7 @@ class AttachmentsController < ApplicationController
end
tip_exception(403, "您没有权限进入") if project.present? && !candown
end
tip_exception(403, "您没有权限查看") if project.present? && !candown if @file.is_public == 0 && author_id != current_user.id
tip_exception(403, "您没有权限查看") if @file.is_public == 0 && @file.author_id != current_user.id
end
end