X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/c83df787be356ebee4dfe1adc417484c4bc900c7..402be7db4c5795a40bbf974cec3d1e31b0c1708f:/services/api/app/models/arvados_model.rb diff --git a/services/api/app/models/arvados_model.rb b/services/api/app/models/arvados_model.rb index c71996a372..327bf63b5f 100644 --- a/services/api/app/models/arvados_model.rb +++ b/services/api/app/models/arvados_model.rb @@ -656,7 +656,7 @@ class ArvadosModel < ApplicationRecord # itself. (If we're in the act of unfreezing, we only need # :unfreeze permission, which means "what write permission would # be if target weren't frozen") - unless ((respond_to?(:frozen_by_uuid) && frozen_by_uuid_in_database && !frozen_by_uuid) ? + unless ((respond_to?(:frozen_by_uuid) && frozen_by_uuid_was && !frozen_by_uuid) ? current_user.can?(unfreeze: uuid) : current_user.can?(write: uuid)) logger.warn "User #{current_user.uuid} tried to modify #{self.class.to_s} #{self.uuid} without write permission"