Commit a64a3103 authored by HERBERT Ryan's avatar HERBERT Ryan
Browse files

file.py apply new permission check for sample_sets

parent b2e91500
......@@ -147,7 +147,7 @@ def add_form():
if request.vars['patient_id'] != '' :
try:
patient_id = extract_id(request.vars['patient_id'], error)
if not auth.can_modify_patient(patient_id) :
if not auth.can_modify('patient', patient_id) :
error += " missing permission for patient "+str(patient_id)
except ValueError:
error += " Invalid patient %s" % request.vars['patient_id']
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment