Skip to content

Commit a14e6e9

Browse files
authored
Make requests of a peer review available to those with read access (#7027)
When users have read only access, It makes sense for them to be able to request another user to review a finding
1 parent e537b99 commit a14e6e9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

dojo/finding/views.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -997,7 +997,7 @@ def risk_unaccept(request, fid):
997997
return redirect_to_return_url_or_else(request, reverse('view_finding', args=(finding.id, )))
998998

999999

1000-
@user_is_authorized(Finding, Permissions.Finding_Edit, 'fid')
1000+
@user_is_authorized(Finding, Permissions.Finding_View, 'fid')
10011001
def request_finding_review(request, fid):
10021002
finding = get_object_or_404(Finding, id=fid)
10031003
user = get_object_or_404(Dojo_User, id=request.user.id)

0 commit comments

Comments
 (0)