All new accounts created on Gitlab now require administrator approval. If you invite any collaborators, please let Flux staff know so they can approve the accounts.

Commit 34eec4bd authored by Leigh B Stoller's avatar Leigh B Stoller

Fix profile permission check.

parent 5295bf87
......@@ -627,10 +627,12 @@ function CheckStep2()
if (!$profile) {
$errors["error"] = "No such profile exists";
}
elseif (!($profile->ispublic() ||
(isset($this_user) && $profile->CanInstantiate($this_user)))){
$errors["error"] = "No permission to use profile";
}
#
# Our permission model is that anyone who knows the uuid can
# instantiate the profile, and either they provided the URL
# in the URL or its a profile uuid they got from the instantiate
# page via their permissions. So no checks here.
#
}
if (!$this_user) {
#
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment