X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/9ede4c0a5cdadd5f1b5664950146626b794a6921..cf736bbc9cfa288cca1dbced48dd144770a37ce4:/services/api/app/models/arvados_model.rb diff --git a/services/api/app/models/arvados_model.rb b/services/api/app/models/arvados_model.rb index c71996a372..327bf63b5f 100644 --- a/services/api/app/models/arvados_model.rb +++ b/services/api/app/models/arvados_model.rb @@ -656,7 +656,7 @@ class ArvadosModel < ApplicationRecord # itself. (If we're in the act of unfreezing, we only need # :unfreeze permission, which means "what write permission would # be if target weren't frozen") - unless ((respond_to?(:frozen_by_uuid) && frozen_by_uuid_in_database && !frozen_by_uuid) ? + unless ((respond_to?(:frozen_by_uuid) && frozen_by_uuid_was && !frozen_by_uuid) ? current_user.can?(unfreeze: uuid) : current_user.can?(write: uuid)) logger.warn "User #{current_user.uuid} tried to modify #{self.class.to_s} #{self.uuid} without write permission"