fix: allow access to public documents for all users
This commit is contained in:
@@ -48,7 +48,7 @@ class UploadVoter extends Voter
|
||||
/** @var User $user */
|
||||
$user = $token->getUser();
|
||||
|
||||
return $upload->getOwner() === $user;
|
||||
return Upload::TYPE_DOCUMENT === $upload->getType() || $user === $upload->getOwner();
|
||||
}
|
||||
|
||||
return false;
|
||||
|
||||
Reference in New Issue
Block a user