Fixed: private projects name are displayed on account/show even if the current user doesn't have access to these private projects.
git-svn-id: http://redmine.rubyforge.org/svn/trunk@1036 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
parent
bd85c0cbb1
commit
860ff9345f
|
@ -30,7 +30,7 @@ class AccountController < ApplicationController
|
||||||
|
|
||||||
# show only public projects and private projects that the logged in user is also a member of
|
# show only public projects and private projects that the logged in user is also a member of
|
||||||
@memberships = @user.memberships.select do |membership|
|
@memberships = @user.memberships.select do |membership|
|
||||||
membership.project.is_public? || (User.current.role_for_project(membership.project))
|
membership.project.is_public? || (User.current.member_of?(membership.project))
|
||||||
end
|
end
|
||||||
rescue ActiveRecord::RecordNotFound
|
rescue ActiveRecord::RecordNotFound
|
||||||
render_404
|
render_404
|
||||||
|
|
Loading…
Reference in New Issue