Skip to content

Commit

Permalink
[#2939] Auth group/org show changes - everyone can see
Browse files Browse the repository at this point in the history
  • Loading branch information
tobes committed Oct 3, 2012
1 parent 8c02684 commit a154aab
Showing 1 changed file with 5 additions and 8 deletions.
13 changes: 5 additions & 8 deletions ckan/logic/auth/get.py
Expand Up @@ -140,15 +140,12 @@ def revision_show(context, data_dict):
return {'success': True}

def group_show(context, data_dict):
model = context['model']
user = context.get('user')
group = get_group_object(context, data_dict)
# anyone can see a group
return {'success': True}

authorized = logic.check_access_old(group, model.Action.READ, context)
if not authorized:
return {'success': False, 'msg': _('User %s not authorized to read group %s') % (str(user),group.id)}
else:
return {'success': True}
def organization_show(context, data_dict):
# anyone can see a organization
return {'success': True}

def tag_show(context, data_dict):
# No authz check in the logic function
Expand Down

0 comments on commit a154aab

Please sign in to comment.