From d07da3b0b0b182f9d70fd00a87dfae3ab4c4db66 Mon Sep 17 00:00:00 2001 From: Sean Hammond Date: Tue, 4 Jun 2013 18:13:17 +0200 Subject: [PATCH] [#953] Don't show inactive datasets Don't allow non-sysadmins to read inactive datasets. This fixes a test that was failing. --- ckan/logic/auth/get.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ckan/logic/auth/get.py b/ckan/logic/auth/get.py index fc72b2d065f..4383517174e 100644 --- a/ckan/logic/auth/get.py +++ b/ckan/logic/auth/get.py @@ -100,7 +100,7 @@ def package_show(context, data_dict): auth = new_authz.is_authorized('package_update', context, data_dict) authorized = auth.get('success') - elif package.owner_org is None: + elif package.owner_org is None and package.state == 'active': return {'success': True} else: # anyone can see a public package