|
|
|
@ -130,7 +130,12 @@ class AttachmentsController < ApplicationController
|
|
|
|
|
def download
|
|
|
|
|
# modify by nwb
|
|
|
|
|
# 下载添加权限设置
|
|
|
|
|
candown = attachment_candown @attachment
|
|
|
|
|
if (params[:type] && params[:type] == "wechat" )
|
|
|
|
|
candown = true
|
|
|
|
|
else
|
|
|
|
|
candown = attachment_candown @attachment
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
if candown || User.current.admin? || User.current.id == @attachment.author_id
|
|
|
|
|
if stale?(:etag => @attachment.digest)
|
|
|
|
|
if params[:preview] == 'true'
|
|
|
|
@ -710,7 +715,7 @@ class AttachmentsController < ApplicationController
|
|
|
|
|
def has_login
|
|
|
|
|
unless (@attachment && @attachment.container_type == "Organization").nil?
|
|
|
|
|
unless (@attachment && @attachment.container_type == "PhoneAppVersion").nil?
|
|
|
|
|
render_403 if !User.current.logged? && !(@attachment.container_type == 'OrgSubfield' && @attachment.container.organization.allow_guest_download) && !(@attachment.container_type == 'OrgDocumentComment' && @attachment.container.organization.allow_guest_download)
|
|
|
|
|
render_403 if (!User.current.logged? && !(params[:type] && params[:type] == "wechat")) && !(@attachment.container_type == 'OrgSubfield' && @attachment.container.organization.allow_guest_download) && !(@attachment.container_type == 'OrgDocumentComment' && @attachment.container.organization.allow_guest_download)
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|