fix bug in GET member API

This commit is contained in:
Wenkai Yin 2017-07-12 19:17:26 +08:00
parent ca6bd3b585
commit d51b01c200

View File

@ -78,8 +78,8 @@ func (pma *ProjectMemberAPI) Prepare() {
}
pma.project = project
if pma.Ctx.Input.IsGet() && !pma.SecurityCtx.HasReadPerm(pid) ||
!pma.SecurityCtx.HasAllPerm(pid) {
if !(pma.Ctx.Input.IsGet() && pma.SecurityCtx.HasReadPerm(pid) ||
pma.SecurityCtx.HasAllPerm(pid)) {
pma.HandleForbidden(pma.SecurityCtx.GetUsername())
return
}