yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-11-02 19:04:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix wrong permissions assigns (upload, users-permissions) (#8320)

Browse Source 
Signed-off-by: Convly <jean-sebastien.herbaux@epitech.eu>
This commit is contained in:
Jean-Sébastien Herbaux 2020-10-13 18:51:09 +02:00 committed by GitHub
parent ecb377727a
commit 9871562359
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/strapi-plugin-upload/controllers/upload/admin.js
View File

@ -100,7 +100,7 @@ module.exports = {
state: { userAbility },
} = ctx;
if (userAbility.cannot(ACTIONS.read, fileModel)) {
if (userAbility.cannot(ACTIONS.readSettings, fileModel)) {
return ctx.forbidden();
}

2
packages/strapi-plugin-users-permissions/config/routes.json
View File

@ -52,7 +52,7 @@
"handler": "UsersPermissions.getRoles",
"config": {
"policies": [
["admin::hasPermissions", ["plugins::users-permissions.roles.create"]]
["admin::hasPermissions", ["plugins::users-permissions.roles.read"]]
],
"description": "Retrieve all role documents",
"tag": {