Fix access check for projects
This commit is contained in:
@@ -183,7 +183,8 @@ class Projects extends CI_Controller {
|
||||
*/
|
||||
private function _checkAccess($projectId) {
|
||||
$project = $this->project->getById($projectId);
|
||||
return $this->access->isAdmin() || $project['public'] == 1;
|
||||
$share = $this->share->get($projectId, $this->session->userdata('user_id'));
|
||||
return $this->access->isAdmin() || $project['public'] == 1 || isset($share['project_id']);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user