From a0e02b0b992094369f07301cf860517f7ada0f5f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B6rn=20Fromme?= <fromme@dreipunktnull.com>
Date: Sat, 18 May 2024 16:16:41 +0200
Subject: [PATCH] fix: allow access to public documents for all users

---
 src/Security/Voter/UploadVoter.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Security/Voter/UploadVoter.php b/src/Security/Voter/UploadVoter.php
index d00f8a2..7bee1fa 100644
--- a/src/Security/Voter/UploadVoter.php
+++ b/src/Security/Voter/UploadVoter.php
@@ -48,7 +48,7 @@ class UploadVoter extends Voter
             /** @var User $user */
             $user = $token->getUser();
 
-            return $upload->getOwner() === $user;
+            return Upload::TYPE_DOCUMENT === $upload->getType() || $user === $upload->getOwner();
         }
 
         return false;