From 37decd9b43dedee78adbe80fd352a0a2446ce42c Mon Sep 17 00:00:00 2001 From: Ahmad Farhat Date: Thu, 16 Apr 2020 12:52:04 -0400 Subject: [PATCH] Fixed role permissin check for update_recording and delete_recording (#1308) Co-authored-by: Jesus Federico --- app/controllers/recordings_controller.rb | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/app/controllers/recordings_controller.rb b/app/controllers/recordings_controller.rb index d5d3c80f..fc82470e 100644 --- a/app/controllers/recordings_controller.rb +++ b/app/controllers/recordings_controller.rb @@ -57,9 +57,7 @@ class RecordingsController < ApplicationController # Ensure the user is logged into the room they are accessing. def verify_room_ownership - if !current_user || (!@room.owned_by?(current_user) && - !current_user.highest_priority_role.get_permission("can_edit_site_settings") && - !current_user.has_role?(:super_admin)) + if !@room.owned_by?(current_user) && !current_user&.highest_priority_role&.get_permission("can_manage_rooms_recordings") redirect_to root_path end end