From 58bea99430a26e652f5bda24a3bd9f2b444820eb Mon Sep 17 00:00:00 2001 From: Harry Bomrah Date: Thu, 13 Nov 2014 19:50:19 +0800 Subject: [PATCH] fixed authorizations --- app/helpers/orbit_backend_helper.rb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/app/helpers/orbit_backend_helper.rb b/app/helpers/orbit_backend_helper.rb index 0145e85..aa76b9d 100644 --- a/app/helpers/orbit_backend_helper.rb +++ b/app/helpers/orbit_backend_helper.rb @@ -138,8 +138,11 @@ module OrbitBackendHelper end def can_edit_or_delete?(obj) + create_user = obj.create_user_id.to_s rescue nil if @user_authenticated_categories.first == "all" return true + elsif current_user.is_sub_manager?(@module_app) && !create_user.nil? + create_user == current_user.id.to_s else @user_authenticated_categories.include?obj.category_id rescue (current_user.is_manager?(@module_app) rescue false) end