MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

fix: [sightings] Users with sighting permissions should be able to add sightings even if they don't have event write access

pull/4531/head
iglocska 2019-04-24 11:37:44 +02:00
parent a54a54a31c
commit c225520f72
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/Controller/SightingsController.php
View File

@ -19,7 +19,7 @@ class SightingsController extends AppController
// takes an attribute ID or UUID
public function add($id = false)
{
if (!$this->userRole['perm_add']) {
if (!$this->userRole['perm_sighting']) {
throw new MethodNotAllowedException('You are not authorised to add sightings data as you don\'t have write access.');
}
if ($this->request->is('post')) {