mirror of https://github.com/MISP/MISP
fix: [tag:local] Allow users (with correct authorization) to detach
tagspull/4915/head
parent
569837c073
commit
e50f624894
|
@ -3269,7 +3269,7 @@ class AttributesController extends AppController
|
|||
(
|
||||
$this->Auth->user('org_id') !== $event['Event']['orgc_id'] ||
|
||||
(
|
||||
$this->Auth->user('org_id') == Configure::read('MISP.host_org_id') &&
|
||||
$this->Auth->user('org_id') != Configure::read('MISP.host_org_id') &&
|
||||
!empty($attributeTag['AttributeTag']['local'])
|
||||
)
|
||||
) ||
|
||||
|
|
|
@ -3824,7 +3824,7 @@ class EventsController extends AppController
|
|||
(
|
||||
$this->Auth->user('org_id') !== $event['Event']['orgc_id'] ||
|
||||
(
|
||||
$this->Auth->user('org_id') == Configure::read('MISP.host_org_id') &&
|
||||
$this->Auth->user('org_id') != Configure::read('MISP.host_org_id') &&
|
||||
!empty($eventTag['EventTag']['local'])
|
||||
)
|
||||
) ||
|
||||
|
|
Loading…
Reference in New Issue