nofusscomputing/centurion_erp
1
0
Fork 0
Code Issues Wiki Activity

fix(access): during organization permission check, check the entire list of permissions

Browse Source 
!13
This commit is contained in:
Jon Lockwood
2024-05-29 04:46:33 +09:30
parent 6dd6a33707
commit 37ceffcb3b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/access/mixin.py
View File

@ -140,7 +140,7 @@ class OrganizationMixin():
assembled_permission = str(permission["content_type__app_label"]) + '.' + str(permission["codename"])
if assembled_permission in self.get_permission_required()[0] and (team['organization_id'] == self.object_organization() or self.object_organization() == 0):
if assembled_permission in self.get_permission_required() and (team['organization_id'] == self.object_organization() or self.object_organization() == 0):
return True