CIRCL
/
AIL-framework
mirror of https://github.com/CIRCL/AIL-framework
2
1
Fork 0
Code Issues Releases Wiki Activity

fix: [Tracker] edit tracker ACL

pull/534/head
Terrtia 2020-12-08 17:08:39 +01:00
parent 4fa320741c
commit 78903ec033
No known key found for this signature in database
GPG Key ID: 1E1B1F50D84613D0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/lib/Tracker.py
View File

@ -183,7 +183,7 @@ def api_is_allowed_to_edit_tracker(tracker_uuid, user_id):
tracker_creator = r_serv_tracker.hget('tracker:{}'.format(tracker_uuid), 'user_id') tracker_creator = r_serv_tracker.hget('tracker:{}'.format(tracker_uuid), 'user_id')
if not tracker_creator: if not tracker_creator:
return ({"status": "error", "reason": "Unknown uuid"}, 404) return ({"status": "error", "reason": "Unknown uuid"}, 404)
if not is_in_role(user_id, 'admin') or user_id != tracker_creator: if not is_in_role(user_id, 'admin') and user_id != tracker_creator:
return ({"status": "error", "reason": "Access Denied"}, 403) return ({"status": "error", "reason": "Access Denied"}, 403)
return ({"uuid": tracker_uuid}, 200) return ({"uuid": tracker_uuid}, 200)