fix: allow access to public documents for all users
This commit is contained in:
@@ -48,7 +48,7 @@ class UploadVoter extends Voter
|
|||||||
/** @var User $user */
|
/** @var User $user */
|
||||||
$user = $token->getUser();
|
$user = $token->getUser();
|
||||||
|
|
||||||
return $upload->getOwner() === $user;
|
return Upload::TYPE_DOCUMENT === $upload->getType() || $user === $upload->getOwner();
|
||||||
}
|
}
|
||||||
|
|
||||||
return false;
|
return false;
|
||||||
|
|||||||
Reference in New Issue
Block a user