mirror of https://github.com/MISP/MISP
Merge branch '2.4' of https://github.com/MISP/MISP into 2.4
commit
b87fa941b8
|
@ -84,7 +84,7 @@ This software is licensed under [GNU Affero General Public License version 3](ht
|
|||
* Copyright (C) 2012 Christophe Vandeplas
|
||||
* Copyright (C) 2012 Belgian Defence
|
||||
* Copyright (C) 2012 NATO / NCIRC
|
||||
* Copyright (C) 2013-2016 Andras Iklody
|
||||
* Copyright (C) 2015-2016 CIRCL - Computer Incident Response Center Luxembourg
|
||||
* Copyright (C) 2013-2017 Andras Iklody
|
||||
* Copyright (C) 2015-2017 CIRCL - Computer Incident Response Center Luxembourg
|
||||
|
||||
For more information, [the list of authors and contributors](AUTHORS) is available.
|
||||
|
|
|
@ -128,7 +128,7 @@ class OrganisationsController extends AppController {
|
|||
if (!$this->Organisation->exists()) throw new NotFoundException('Invalid organisation');
|
||||
$fullAccess = false;
|
||||
$fields = array('id', 'name', 'date_created', 'date_modified', 'type', 'nationality', 'sector', 'contacts', 'description', 'local', 'uuid');
|
||||
if ($this->_isSiteAdmin() || $this->Auth->user('Organisation')['id'] == $id) {
|
||||
if ($this->_isSiteAdmin() || ($this->_isAdmin() && $this->Auth->user('Organisation')['id'] == $id)) {
|
||||
$fullAccess = true;
|
||||
$fields = array_merge($fields, array('created_by'));
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue