forms: fix receiver access to form submission (#7329)
This commit is contained in:
parent
f4f804f13d
commit
3baccb0b5d
|
@ -251,7 +251,7 @@ class FormPage(Directory):
|
|||
user_roles = set([])
|
||||
other_roles = (self.formdef.roles or [])
|
||||
if self.formdef.workflow_roles:
|
||||
other_roles.extend(self.formdef.workflow_roles.keys())
|
||||
other_roles.extend(self.formdef.workflow_roles.values())
|
||||
if not user_roles.intersection(other_roles):
|
||||
raise errors.AccessForbiddenError()
|
||||
|
||||
|
|
Loading…
Reference in New Issue