Correct access checks when storing filters

Fixes #24437
mantisbt · May 23, 2018 · b421ab2 · b421ab2
1 parent 3a6b55d
commit b421ab2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/query_store.php b/query_store.php
@@ -103,7 +103,7 @@
 }
 
 # ensure that we're not making this filter public if we're not allowed
-if( !access_has_project_level( config_get( 'stored_query_create_shared_threshold' ) ) ) {
+if( $f_is_public && !access_has_project_level( config_get( 'stored_query_create_shared_threshold' ) ) ) {
 	access_denied();
 }