Skip to content

Commit ebce671

Browse files
committed
fix: Add null check for engagement in permission validation for Risk Acceptance
1 parent 52d0a30 commit ebce671

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

dojo/authorization/authorization.py

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -100,7 +100,9 @@ def user_has_permission(user, obj, permission):
100100
isinstance(obj, Risk_Acceptance)
101101
and permission == Permissions.Risk_Acceptance
102102
):
103-
return user_has_permission(user, obj.engagement.product, permission)
103+
if obj.engagement is not None:
104+
return user_has_permission(user, obj.engagement.product, permission)
105+
return user_has_global_permission(user, permission)
104106
if ((
105107
isinstance(obj, Finding | Stub_Finding)
106108
) and permission in Permissions.get_finding_permissions()) or (

0 commit comments

Comments
 (0)