github/directus
1
1
Fork 0
mirror of https://github.com/directus/directus.git synced 2026-04-25 03:00:53 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix asset permission check when you don't have settings

Browse Source 
Fixes #887
This commit is contained in:
rijkvanzanten
2020-11-13 12:18:23 -05:00
parent ea71f58fd8
commit e30170ab0a
2 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
api/src/services/assets.ts
View File

@@ -23,12 +23,10 @@ export class AssetsService {
.from('directus_settings')
.first();
if (publicSettings) {
const systemPublicKeys = Object.values(publicSettings);
const systemPublicKeys = Object.values(publicSettings || {});
if (systemPublicKeys.includes(id) === false && this.accountability?.admin !== true) {
await this.authorizationService.checkAccess('read', 'directus_files', id);
}
if (systemPublicKeys.includes(id) === false && this.accountability?.admin !== true) {
await this.authorizationService.checkAccess('read', 'directus_files', id);
}
const file = await database.select('*').from('directus_files').where({ id }).first();