Only skip check_security checks if check_ownership and check_accessible are false

2026-09-24 16:30:27 +08:00 · 2017-08-20 11:24:09 +02:00
parent 2d16470132
commit cff306b86b
1 changed files with 1 additions and 1 deletions
@@ -87,7 +87,7 @@ class WorkflowsManager(object):
        workflowinvocations. Throw an exception or returns True if user has
        needed level of access.
        """
-        if not check_ownership or check_accessible:
+        if not check_ownership and not check_accessible:
            return True

        # If given an invocation verify ownership of invocation