From d36cc303fbcab1e3163bbfda9e2f87de9dadd47f Mon Sep 17 00:00:00 2001 From: joker-x Date: Tue, 1 Sep 2020 19:14:41 +0200 Subject: [PATCH] Fix --- server/models/namespaces.js | 2 +- server/models/reports.js | 2 -- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/server/models/namespaces.js b/server/models/namespaces.js index 6e961320..d29282d2 100644 --- a/server/models/namespaces.js +++ b/server/models/namespaces.js @@ -119,7 +119,7 @@ async function getById(context, id) { } async function getChildrenTx(tx, context, id) { - + await shares.enforceEntityPermissionTx(tx, context, 'namespace', id, 'view'); const entityType = entitySettings.getEntityType('namespace'); const extraKeys = em.get('models.namespaces.extraKeys', []); diff --git a/server/models/reports.js b/server/models/reports.js index 64292c15..9d31ed74 100644 --- a/server/models/reports.js +++ b/server/models/reports.js @@ -140,7 +140,6 @@ async function remove(context, id) { } async function updateFields(id, fields) { - shares.enforceGlobalPermission(context, 'manageReports'); return await knex('reports').where('id', id).update(fields); } @@ -149,7 +148,6 @@ async function listByState(state, limit) { } async function bulkChangeState(oldState, newState) { - shares.enforceGlobalPermission(context, 'manageReports'); return await knex('reports').where('state', oldState).update('state', newState); }