Two character change, some API calls with sub resources and primary resources weren't working, should allow either the sub resource or the main resource to trigger allowance.

2021-02-26 10:06:02 +00:00 · 2021-02-26 10:06:02 +00:00 · 229498332e
parent 78286ae514
commit 229498332e
1 changed files with 1 additions and 1 deletions
--- a/packages/server/src/utilities/security/permissions.js
+++ b/packages/server/src/utilities/security/permissions.js
@ -156,7 +156,7 @@ exports.doesHaveResourcePermission = (
      break
    }
  }
-  return foundMain && foundSub
+  return foundMain || foundSub
 }

 exports.doesHaveBasePermission = (permType, permLevel, permissionIds) => {