diff options
| author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2006-12-31 17:00:16 +0000 |
|---|---|---|
| committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2006-12-31 17:00:16 +0000 |
| commit | e6fa690d65253be4c97188d0df7efd16306d5f78 (patch) | |
| tree | d2dbf80f42bd075cc5d58b7020b3e318b9a34952 /app | |
| parent | 95cc65f14e02efd18cbb6716a0e0fdf329dae144 (diff) | |
| download | redmine-e6fa690d65253be4c97188d0df7efd16306d5f78.tar.gz redmine-e6fa690d65253be4c97188d0df7efd16306d5f78.zip | |
fixed: public actions not authorized for members of non public projects
git-svn-id: http://redmine.rubyforge.org/svn/trunk@128 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app')
| -rw-r--r-- | app/models/permission.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/models/permission.rb b/app/models/permission.rb index ee4ae56b8..65b9253c7 100644 --- a/app/models/permission.rb +++ b/app/models/permission.rb @@ -56,7 +56,7 @@ class Permission < ActiveRecord::Base find(:all, :include => :roles).each {|p| perms.store "#{p.controller}/#{p.action}", p.roles.collect {|r| r.id } }
perms
end
- @@cached_perms_for_roles[action] and @@cached_perms_for_roles[action].include? role
+ allowed_to_public(action) or (@@cached_perms_for_roles[action] and @@cached_perms_for_roles[action].include? role)
end
def self.allowed_to_role_expired
|