Merge pull request #2180 from Daniel-KM/fix/assertion_owner

Fixed assertion OwnsEntityAssertion when the check is done against a doctrine proxy.
omeka · May 21, 2024 · 49ef999 · 49ef999
2 parents 1ba0984 + fb64bb5
commit 49ef999
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/application/src/Permissions/Assertion/OwnsEntityAssertion.php b/application/src/Permissions/Assertion/OwnsEntityAssertion.php
@@ -12,9 +12,13 @@ class OwnsEntityAssertion implements AssertionInterface
     public function assert(Acl $acl, RoleInterface $role = null,
         ResourceInterface $resource = null, $privilege = null
     ) {
+        if (!$role || !$role instanceof \Omeka\Entity\User) {
+            return false;
+        }
         if ($resource instanceof Value) {
             $resource = $resource->getResource();
         }
-        return $role && $role === $resource->getOwner();
+        $owner = $resource->getOwner();
+        return $owner && $role->getId() === $owner->getId();
     }
 }