修复:非组织工作项不允许跨仓库通过commit操作

This commit is contained in:
yystopf 2024-11-21 15:22:30 +08:00
parent 58a02a0fda
commit e7b5039eb6
1 changed files with 1 additions and 1 deletions

View File

@ -13,7 +13,6 @@ class ChangeIssueStatusByMessageJob < ApplicationJob
https = Net::HTTP.new(url.host, url.port)
https.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Cookie"] = "autologin_trustie=#{Token.get_or_create_permanent_login_token(user, 'autologin')&.value}"
response = https.request(request)
@ -33,6 +32,7 @@ class ChangeIssueStatusByMessageJob < ApplicationJob
issue = project.issues.issue_issue.where(project_issues_index: issue_id).where.not(id: issue_id).take || Issue.issue_issue.find_by_id(issue_id)
next unless issue.present? # issue不存在 跳过
next if issue.project.present? && !issue.project.member?(user) # issue归属项目用户没有修改issue的权限跳过
next if issue.pm_project_id.nil? && project.id.to_i != issue.project&.id.to_i
next if issue.pm_project_id.present? && !get_pm_issue_data(user, project.owner, issue.pm_project_id, issue.id) # issue是组织下工作项不具备组织的访问权限跳过
issue_project = issue.project || Project.new(id: 0, user_id: 0, name: 'pm_mm', identifier: 'pm_mm', is_public:true)