mirror of https://github.com/MISP/MISP
Error When Exporting as IOC if not Site Admin
This was comparing the wrong value to the event org to determine org membership and thus $isMyEvent value for privileges for export of IOCs if not a site admin.pull/217/head
parent
a6999597f1
commit
00ea48b734
|
@ -1811,7 +1811,7 @@ class EventsController extends AppController {
|
|||
//$event['Attribute'] = $this->Whitelist->removeWhitelistedFromArray($event['Attribute'], false);
|
||||
// set up helper variables for the authorisation check in the component
|
||||
$isMyEvent = false;
|
||||
if ($this->Auth->User == $event['Event']['org']) $isMyEvent = true;
|
||||
if ($this->Auth->User('org') == $event['Event']['org']) $isMyEvent = true;
|
||||
$isSiteAdmin = $this->_isSiteAdmin();
|
||||
|
||||
// send the event and the vars needed to check authorisation to the Component
|
||||
|
|
Loading…
Reference in New Issue