Merge branch 'pre_trustie_server' into trustie_server

2026-05-20 11:45:57 +08:00 · 2023-10-18 14:02:49 +08:00
parent bf232f3518 28b8e15fea
commit fa1a03e4db
2 changed files with 5 additions and 1 deletions
--- a/app/controllers/attachments_controller.rb
+++ b/app/controllers/attachments_controller.rb
@@ -229,6 +229,7 @@ class AttachmentsController < ApplicationController
        end
        tip_exception(403, "您没有权限进入") if project.present? && !candown
      end
+      tip_exception(403, "您没有权限查看") if @file.is_public == 0 &&  @file.author_id != current_user.id
    end
  end