fixing permissions for public channels

mamba-org · Nov 30, 2020 · 60c71dc · 60c71dc
1 parent 457ec25
commit 60c71dc
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/quetz/authorization.py b/quetz/authorization.py
@@ -228,12 +228,13 @@ def assert_channel_read(self, channel):
             self.assert_channel_roles(channel.name, [OWNER, MAINTAINER, MEMBER])
 
     def assert_package_read(self, package):
-        self.assert_channel_or_package_roles(
-            package.channel_name,
-            [OWNER, MAINTAINER, MEMBER],
-            package.name,
-            [OWNER, MAINTAINER, MEMBER],
-        )
+        if package.channel.private:
+            self.assert_channel_or_package_roles(
+                package.channel_name,
+                [OWNER, MAINTAINER, MEMBER],
+                package.name,
+                [OWNER, MAINTAINER, MEMBER],
+            )
 
     def assert_package_write(self, package):
         self.assert_channel_or_package_roles(