From 0f3c6995b86aa4232ee8782b74a1e007c9015ba5 Mon Sep 17 00:00:00 2001 From: Christoph Ladurner Date: Sat, 26 Oct 2024 19:39:12 +0200 Subject: [PATCH] fix: creator should not see restricted files --- invenio_records_marc21/services/permissions.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/invenio_records_marc21/services/permissions.py b/invenio_records_marc21/services/permissions.py index d57f2053..28f405c1 100644 --- a/invenio_records_marc21/services/permissions.py +++ b/invenio_records_marc21/services/permissions.py @@ -77,7 +77,7 @@ class Marc21RecordPermissionPolicy(RecordPermissionPolicy): can_manage_files = can_curate can_read_files = [ - IfRestricted("files", then_=can_view, else_=can_all), + IfRestricted("files", then_=can_curate, else_=can_all), ] can_get_content_files = [ IfFileIsLocal(then_=can_read_files, else_=[SystemProcess()])