Skip to content

Commit 8120164

Browse files
clean up
1 parent 24556a6 commit 8120164

File tree

1 file changed

+1
-4
lines changed

1 file changed

+1
-4
lines changed

src/common/helper.js

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -858,18 +858,15 @@ async function ensureAccessibleByGroupsAccess (currentUser, challenge) {
858858
*/
859859
async function _ensureAccessibleForTaskChallenge (currentUser, challenge) {
860860
let challengeResourceIds
861-
// Remove privateDescription for unregistered users
862861
if (currentUser) {
863862
if (!currentUser.isMachine) {
864863
const challengeResources = await getChallengeResources(challenge.id)
865864
challengeResourceIds = _.map(challengeResources, r => _.toString(r.memberId))
866-
if (!_.includes(challengeResourceIds, _.toString(currentUser.userId))) {
867-
}
868865
}
869866
}
870867
// Check if challenge is task and apply security rules
871868
if (_.get(challenge, 'task.isTask', false) && _.get(challenge, 'task.isAssigned', false)) {
872-
const canAccesChallenge = _.isUndefined(currentUser) ? false : _.includes((challengeResourceIds || []), _.toString(currentUser.userId)) || currentUser.isMachine || hasAdminRole(currentUser)
869+
const canAccesChallenge = _.isUndefined(currentUser) ? false : currentUser.isMachine || hasAdminRole(currentUser) || _.includes((challengeResourceIds || []), _.toString(currentUser.userId))
873870
if (!canAccesChallenge) {
874871
throw new errors.ForbiddenError(`You don't have access to view this challenge`)
875872
}

0 commit comments

Comments
 (0)