Commit 7edd9c40 authored by Stephane Glondu's avatar Stephane Glondu
Browse files

Bugfix: forbid access to records when nobody is logged in

parent 5e505e2b
......@@ -343,8 +343,8 @@ module Make (D : ELECTION_DATA) (P : WEB_PARAMS) : REGISTRABLE = struct
lwt () =
if f = ESRecords then (
match site_user with
| Some u when W.metadata.e_owner <> Some u -> forbidden ()
| _ -> return ()
| Some u when W.metadata.e_owner = Some u -> return ()
| _ -> forbidden ()
) else return ()
in
let content_type = content_type_of_file f in
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment