wieerwill/platform
1
0
Fork 0
mirror of https://github.com/hcengineering/platform.git synced 2025-05-09 17:05:01 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

uberf-10499: fix space security CR for txes (#8848)

Browse Source 
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com>
This commit is contained in:
Alexey Zinoviev 2025-05-06 08:27:25 +04:00 committed by GitHub
parent 4088fd1490
commit 9f94b06d6a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/postgres/src/storage.ts
View File

@ -811,7 +811,7 @@ abstract class PostgresAdapterBase implements DbAdapter {
}
if (query.space === acc._id) return
if (domain === DOMAIN_SPACE && isOwner(acc) && showArchived) return
const key = domain === DOMAIN_SPACE ? '_id' : domain === DOMAIN_TX ? "data ->> 'objectSpace'" : 'space'
const key = domain === DOMAIN_SPACE ? '_id' : domain === DOMAIN_TX ? '"objectSpace"' : 'space'
const privateCheck = domain === DOMAIN_SPACE ? ' OR sec.private = false' : ''
const archivedCheck = showArchived ? '' : ' AND sec.archived = false'
const q = `(sec.members @> '{"${acc._id}"}' OR sec."_class" = '${core.class.SystemSpace}'${privateCheck})${archivedCheck}`