From 16a96a308c4124db8a2f3a692c46d11543351215 Mon Sep 17 00:00:00 2001 From: Conrad Hoffmann Date: Mon, 11 Dec 2023 10:35:23 +0100 Subject: [PATCH] api/job_by_id_manifest_GET: fix logic grouping --- buildsrht/blueprints/api.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/buildsrht/blueprints/api.py b/buildsrht/blueprints/api.py index d83402f..9c1ab54 100644 --- a/buildsrht/blueprints/api.py +++ b/buildsrht/blueprints/api.py @@ -129,7 +129,7 @@ def jobs_by_id_manifest_GET(job_id): job = Job.query.filter(Job.id == job_id).first() if not job: abort(404) - if job.visibility == Visibility.PRIVATE and (current_token is None or job.owner_id != current_token.user_id): + if job.visibility == Visibility.PRIVATE and ((current_token is None) or (job.owner_id != current_token.user_id)): abort(404) # TODO: ACLs return Response(job.manifest, content_type="text/plain") -- 2.38.5