diff --git a/CHANGELOG.md b/CHANGELOG.md index 51d31f72f7b..5cfac9debca 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -78,6 +78,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Annotations search does not work correctly in some corner cases (when use complex properties with width, height) () - Kibana requests are not proxied due to django-revproxy incompatibility with Django >3.2.x () - Content type for getting frame with tasks/{id}/data/ endpoint () +- Bug: Permission error occured when accessing the comments of a specific issue () + ### Security - Updated ELK to 6.8.23 which uses log4j 2.17.1 () diff --git a/cvat/apps/iam/permissions.py b/cvat/apps/iam/permissions.py index 750bd958455..1cd80b6ab89 100644 --- a/cvat/apps/iam/permissions.py +++ b/cvat/apps/iam/permissions.py @@ -1,4 +1,4 @@ -# Copyright (C) 2021 Intel Corporation +# Copyright (C) 2022 Intel Corporation # # SPDX-License-Identifier: MIT @@ -959,7 +959,8 @@ def get_scopes(request, view, obj): 'create': 'create@job', 'destroy': 'delete', 'partial_update': 'update', - 'retrieve': 'view' + 'retrieve': 'view', + 'comments': 'view' }.get(view.action, None)] def get_resource(self):