From e6fa690d65253be4c97188d0df7efd16306d5f78 Mon Sep 17 00:00:00 2001 From: Jean-Philippe Lang Date: Sun, 31 Dec 2006 17:00:16 +0000 Subject: [PATCH] fixed: public actions not authorized for members of non public projects git-svn-id: http://redmine.rubyforge.org/svn/trunk@128 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- app/models/permission.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/models/permission.rb b/app/models/permission.rb index ee4ae56b8..65b9253c7 100644 --- a/app/models/permission.rb +++ b/app/models/permission.rb @@ -56,7 +56,7 @@ class Permission < ActiveRecord::Base find(:all, :include => :roles).each {|p| perms.store "#{p.controller}/#{p.action}", p.roles.collect {|r| r.id } } perms end - @@cached_perms_for_roles[action] and @@cached_perms_for_roles[action].include? role + allowed_to_public(action) or (@@cached_perms_for_roles[action] and @@cached_perms_for_roles[action].include? role) end def self.allowed_to_role_expired