From e62d200fe5e70fbf26613c9db30a9d0bc889221d Mon Sep 17 00:00:00 2001 From: Kiwon Jung Date: Sat, 5 Mar 2022 00:45:25 +0900 Subject: [PATCH] fixed: Permission error occured when accessing the comments of a specific issue - #4416 (#4421) --- CHANGELOG.md | 2 ++ cvat/apps/iam/permissions.py | 5 +++-- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 51d31f72f7bf..5cfac9debcad 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -78,6 +78,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Annotations search does not work correctly in some corner cases (when use complex properties with width, height) () - Kibana requests are not proxied due to django-revproxy incompatibility with Django >3.2.x () - Content type for getting frame with tasks/{id}/data/ endpoint () +- Bug: Permission error occured when accessing the comments of a specific issue () + ### Security - Updated ELK to 6.8.23 which uses log4j 2.17.1 () diff --git a/cvat/apps/iam/permissions.py b/cvat/apps/iam/permissions.py index 750bd9584555..1cd80b6ab89e 100644 --- a/cvat/apps/iam/permissions.py +++ b/cvat/apps/iam/permissions.py @@ -1,4 +1,4 @@ -# Copyright (C) 2021 Intel Corporation +# Copyright (C) 2022 Intel Corporation # # SPDX-License-Identifier: MIT @@ -959,7 +959,8 @@ def get_scopes(request, view, obj): 'create': 'create@job', 'destroy': 'delete', 'partial_update': 'update', - 'retrieve': 'view' + 'retrieve': 'view', + 'comments': 'view' }.get(view.action, None)] def get_resource(self):