1
0
Fork 0
mirror of synced 2024-09-28 07:21:35 +12:00
This commit is contained in:
Jake Barnby 2022-08-14 17:24:50 +12:00
parent c627226ac9
commit a8698b6065
3 changed files with 3 additions and 4 deletions

View file

@ -1878,7 +1878,7 @@ App::post('/v1/databases/:databaseId/collections/:collectionId/documents')
fn ($permission) => $permission !== Database::PERMISSION_CREATE
),
);
$permissions = PermissionsProcessor::handleAggregates($permissions);
if (!PermissionsProcessor::allowedForResourceType('document', $permissions)) {

View file

@ -300,7 +300,7 @@ class Realtime extends Adapter
$channels[] = 'files';
$channels[] = 'buckets.' . $payload->getAttribute('bucketId') . '.files';
$channels[] = 'buckets.' . $payload->getAttribute('bucketId') . '.files.' . $payload->getId();
$roles = $bucket->getAttribute('fileSecurity', false)
$roles = $bucket->getAttribute('fileSecurity', false)
? \array_merge($bucket->getRead(), $payload->getRead())
: $bucket->getRead();
}

View file

@ -35,8 +35,7 @@ class PermissionsProcessor
?array $permissions,
string $userId,
array $allowedPermissions = Database::PERMISSIONS
): array
{
): array {
if (\is_null($permissions)) {
$permissions = [];
if (!empty($userId)) {