github/directus
1
1
Fork 0
mirror of https://github.com/directus/directus.git synced 2026-04-03 03:00:39 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fixed authorization service (#4130)

Browse Source 
Fix permission filter when validate payload in authorization service
This commit is contained in:
alejandro-tss
2021-02-17 17:19:07 +01:00
committed by GitHub
parent 84c52feb71
commit d9cff2f8f3
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
api/src/services/authorization.ts
View File

@@ -197,7 +197,7 @@ export class AuthorizationService {
};
} else {
permission = this.schema.permissions.find((permission) => {
return permission.action === action;
return permission.collection === collection && permission.action === action;
});
if (!permission) throw new ForbiddenException();