mirror of
https://github.com/dadosfera/maestro.git
synced 2026-11-09 11:49:08 +00:00
FIX: unitary permitting
This commit is contained in:
@@ -197,12 +197,14 @@ export class CatalogController {
|
||||
const dashboard = res.dashboard;
|
||||
|
||||
for (const role of user_roles) {
|
||||
if (dashboard.roles.includes(role)) has_permission = true;
|
||||
if (dashboard.p_roles.includes(role)) has_permission = true;
|
||||
}
|
||||
|
||||
if (dashboard.users.includes(user_id)) has_permission = true;
|
||||
if (dashboard.p_users.includes(user_id)) has_permission = true;
|
||||
|
||||
if (is_data_manager || has_permission) {
|
||||
delete res[0].p_roles;
|
||||
delete res[0].p_users;
|
||||
return res;
|
||||
}
|
||||
|
||||
@@ -247,12 +249,14 @@ export class CatalogController {
|
||||
const table = res[0];
|
||||
|
||||
for (const role of user_roles) {
|
||||
if (table.roles.includes(role)) has_permission = true;
|
||||
if (table.p_roles.includes(role)) has_permission = true;
|
||||
}
|
||||
|
||||
if (table.users.includes(user_id)) has_permission = true;
|
||||
if (table.p_users.includes(user_id)) has_permission = true;
|
||||
|
||||
if (is_data_manager || has_permission) {
|
||||
delete res[0].p_roles;
|
||||
delete res[0].p_users;
|
||||
return res;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user