Fix manageOwnRequests check

This commit is contained in:
Florian Dupret 2021-11-10 18:30:31 +01:00
commit d7a07bf9d4

View file

@ -88,8 +88,8 @@ namespace Ombi.Core.Engine
// Users with 'ManageOwnRequests' can only manage their own requests // Users with 'ManageOwnRequests' can only manage their own requests
var canManageOwnRequests = await IsInRole(OmbiRoles.ManageOwnRequests); var canManageOwnRequests = await IsInRole(OmbiRoles.ManageOwnRequests);
if (canManageOwnRequests) { if (canManageOwnRequests) {
var isRequestedBySameUser = ( await GetUser() ).Equals(request.RequestedUser); var isRequestedBySameUser = ( await GetUser() ).Id == request.RequestedUser?.Id;
if (!isRequestedBySameUser) { if (isRequestedBySameUser) {
return new RequestEngineResult { Result = true }; return new RequestEngineResult { Result = true };
} }
} }