Commit 34eec4bd authored by Leigh B Stoller's avatar Leigh B Stoller
Browse files

Fix profile permission check.

parent 5295bf87
......@@ -627,10 +627,12 @@ function CheckStep2()
if (!$profile) {
$errors["error"] = "No such profile exists";
elseif (!($profile->ispublic() ||
(isset($this_user) && $profile->CanInstantiate($this_user)))){
$errors["error"] = "No permission to use profile";
# Our permission model is that anyone who knows the uuid can
# instantiate the profile, and either they provided the URL
# in the URL or its a profile uuid they got from the instantiate
# page via their permissions. So no checks here.
if (!$this_user) {
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment