Skip to content

Commit

Permalink
fixed: Permission error occured when accessing the comments of a spec…
Browse files Browse the repository at this point in the history
…ific issue - #4416 (#4421)
  • Loading branch information
k1won committed Mar 4, 2022
1 parent 14cee3d commit e62d200
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 2 deletions.
2 changes: 2 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -78,6 +78,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- Annotations search does not work correctly in some corner cases (when use complex properties with width, height) (<https://github.com/openvinotoolkit/cvat/pull/4198>)
- Kibana requests are not proxied due to django-revproxy incompatibility with Django >3.2.x (<https://github.com/openvinotoolkit/cvat/issues/4085>)
- Content type for getting frame with tasks/{id}/data/ endpoint (<https://github.com/openvinotoolkit/cvat/pull/4333>)
- Bug: Permission error occured when accessing the comments of a specific issue (<https://github.com/openvinotoolkit/cvat/issues/4416>)


### Security
- Updated ELK to 6.8.23 which uses log4j 2.17.1 (<https://github.com/openvinotoolkit/cvat/pull/4206>)
Expand Down
5 changes: 3 additions & 2 deletions cvat/apps/iam/permissions.py
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# Copyright (C) 2021 Intel Corporation
# Copyright (C) 2022 Intel Corporation
#
# SPDX-License-Identifier: MIT

Expand Down Expand Up @@ -959,7 +959,8 @@ def get_scopes(request, view, obj):
'create': 'create@job',
'destroy': 'delete',
'partial_update': 'update',
'retrieve': 'view'
'retrieve': 'view',
'comments': 'view'
}.get(view.action, None)]

def get_resource(self):
Expand Down

0 comments on commit e62d200

Please sign in to comment.