Fix read_group ability

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Fix read_group ability
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Dmitriy Zaporozhets
1 parent b6a93420
Showing 1 changed file with 1 additions and 1 deletions Show diff stats
app/models/ability.rb
@@ -184,7 +184,7 @@ class Ability
     def group_abilities user, group
       rules = []
  
-      if user.admin? || Projects::CollectService.new.execute(user, group: group).any?
+      if user.admin? || group.users.include?(user) || Projects::CollectService.new.execute(user, group: group).any?
         rules << :read_group
       end
...	...	@@ -184,7 +184,7 @@ class Ability
184	184	def group_abilities user, group
185	185	rules = []
186	186
187		- if user.admin? \|\| Projects::CollectService.new.execute(user, group: group).any?
	187	+ if user.admin? \|\| group.users.include?(user) \|\| Projects::CollectService.new.execute(user, group: group).any?
188	188	rules << :read_group
189	189	end
190	190
...	...