changeset 414:576a1dca2ee2 bug_152

Check that user is permitted to see subproject, not only parent project. Fixes #152
author Chris Cannam <chris.cannam@soundsoftware.ac.uk>
date Tue, 10 May 2011 10:08:34 +0100
parents 0964cbb51753
children 405dd646a6cc 165e443660c4 2cd212a468b6
files app/helpers/projects_helper.rb
diffstat 1 files changed, 3 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/app/helpers/projects_helper.rb	Thu Apr 28 13:36:40 2011 +0100
+++ b/app/helpers/projects_helper.rb	Tue May 10 10:08:34 2011 +0100
@@ -237,7 +237,9 @@
     s << "</tr>"
 
     project.children.each do |child|
-      s << render_project_in_table(child, oddeven, level + 1)
+      if child.is_public? or User.current.member_of?(child)
+        s << render_project_in_table(child, oddeven, level + 1)
+      end
     end
     
     s