[myexperiment-hackers] [2081] branches/authorization_new/app/controllers/jobs_controller.rb: fixed auth bug where the wrong object was used

[noreply]

Revision

2081

Author

dgc

Date

2009-02-03 06:32:11 -0500 (Tue, 03 Feb 2009)

Log Message

fixed auth bug where the wrong object was used

Modified Paths

• branches/authorization_new/app/controllers/jobs_controller.rb

Diff

Modified: branches/authorization_new/app/controllers/jobs_controller.rb (2080 => 2081)

--- branches/authorization_new/app/controllers/jobs_controller.rb	2009-02-03 11:11:53 UTC (rev 2080)
+++ branches/authorization_new/app/controllers/jobs_controller.rb	2009-02-03 11:32:11 UTC (rev 2081)
@@ -23,7 +23,7 @@
   end
 
   def show
-    unless Authorization.is_authorized?(action_name, nil, @job, current_user)
+    unless Authorization.is_authorized?(action_name, nil, @job.runnable, current_user)
       flash[:error] = "<p>You will not be able to submit this Job, but you can still see the details of it."
       flash[:error] = "<p>The runnable item (address@hidden) is not authorized - you need download priviledges to run it.</p>"
     end