fix: [tag:local] Allow users (with correct authorization) to detach

tags
pull/4915/head
mokaddem 2019-07-19 15:28:13 +02:00
parent 569837c073
commit e50f624894
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
2 changed files with 2 additions and 2 deletions

View File

@ -3269,7 +3269,7 @@ class AttributesController extends AppController
(
$this->Auth->user('org_id') !== $event['Event']['orgc_id'] ||
(
$this->Auth->user('org_id') == Configure::read('MISP.host_org_id') &&
$this->Auth->user('org_id') != Configure::read('MISP.host_org_id') &&
!empty($attributeTag['AttributeTag']['local'])
)
) ||

View File

@ -3824,7 +3824,7 @@ class EventsController extends AppController
(
$this->Auth->user('org_id') !== $event['Event']['orgc_id'] ||
(
$this->Auth->user('org_id') == Configure::read('MISP.host_org_id') &&
$this->Auth->user('org_id') != Configure::read('MISP.host_org_id') &&
!empty($eventTag['EventTag']['local'])
)
) ||