Fix Issue View Permissions

VladislavKostyukevich · VladislavKostyukevich · commit 3acf510bcf61 · 2020-05-15T08:47:23.000+03:00
diff --git a/src/main/java/main/controllers/Project/IssueController.java b/src/main/java/main/controllers/Project/IssueController.java
@@ -32,7 +32,7 @@ public IssueController(UserDto user) {
     }
     @Override
     public List<IssueDto> get(IssueDto entity) throws AqualityException {
-        if (baseUser.isManager() || baseUser.getProjectUser(entity.getProject_id()).isViewer()) {
+        if (baseUser.isManager() || baseUser.isAuditAdmin() || baseUser.isAuditor() || baseUser.getProjectUser(entity.getProject_id()).isViewer()) {
             return fillIssues(issueDao.searchAll(entity));
         } else {
             throw new AqualityPermissionsException("Account is not allowed to view Issues", baseUser);

Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,7 @@ public IssueController(UserDto user) {`
`32`	`32`	`}`
`33`	`33`	`@Override`
`34`	`34`	`public List<IssueDto> get(IssueDto entity) throws AqualityException {`
`35`		`- if (baseUser.isManager() \|\| baseUser.getProjectUser(entity.getProject_id()).isViewer()) {`
	`35`	`+ if (baseUser.isManager() \|\| baseUser.isAuditAdmin() \|\| baseUser.isAuditor() \|\| baseUser.getProjectUser(entity.getProject_id()).isViewer()) {`
`36`	`36`	`return fillIssues(issueDao.searchAll(entity));`
`37`	`37`	`} else {`
`38`	`38`	`throw new AqualityPermissionsException("Account is not allowed to view Issues", baseUser);`