maverick/docbrown
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Adjusting logic to match intention (#17015)

Browse source 
Unearthed in a deep read of the code during the review of forem/forem#16997
This commit is contained in:
Jeremy Friesen 2022-03-30 16:21:58 -04:00 • committed by GitHub
parent f680bc8d53
commit 010fc3bce0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/dashboards_controller.rb
View file

@ -21,7 +21,7 @@ class DashboardsController < ApplicationController
fetch_and_authorize_user
target = @user
# NOTE: This is a subtle policy check happening here that we are not encapsulating
not_authorized if params[:org_id] && !@user.org_admin?(params[:org_id] || @user.any_admin?)
not_authorized if params[:org_id] && !(@user.org_admin?(params[:org_id]) || @user.any_admin?)
@organizations = @user.admin_organizations