ag-admin/OpenSlides
0
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #3719 from FinnStutzenstein/changeMediafileProtectionLogicAgain

Browse Source 
Changed mediafile protection logic (closes #3707)
This commit is contained in:
Emanuel Schütze 2018-04-24 11:48:21 +02:00 committed by GitHub
commit 231d8de036
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openslides/mediafiles/views.py
View File

@ -81,7 +81,7 @@ def protected_serve(request, path, document_root=None, show_indexes=False):
is_special_file = mediafile.is_logo() or mediafile.is_font() is_special_file = mediafile.is_logo() or mediafile.is_font()
is_hidden_but_no_perms = mediafile.hidden and not has_perm(request.user, 'mediafiles.can_see_hidden') is_hidden_but_no_perms = mediafile.hidden and not has_perm(request.user, 'mediafiles.can_see_hidden')
if not can_see or (is_hidden_but_no_perms and not is_special_file): if not is_special_file and (not can_see or is_hidden_but_no_perms):
return HttpResponseForbidden(content="Forbidden.") return HttpResponseForbidden(content="Forbidden.")
else: else:
return serve(request, path, document_root, show_indexes) return serve(request, path, document_root, show_indexes)