Merge pull request #5922 from christianbeeznest/ofaj-22191

Internal: Fix access to public course documents for authenticated users - refs BT#22191
chamilo · Nov 12, 2024 · 80a49c6 · 80a49c6
2 parents 27cc4ae + 57e4a10
commit 80a49c6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/CoreBundle/Security/Authorization/Voter/ResourceNodeVoter.php b/src/CoreBundle/Security/Authorization/Voter/ResourceNodeVoter.php
@@ -173,6 +173,11 @@ protected function voteOnAttribute(string $attribute, $subject, TokenInterface $
             ) {
                 return true;
             }
+            if ($firstLink->getCourse() instanceof Course
+                && $firstLink->getCourse()->isPublic()
+            ) {
+                return true;
+            }
         }
 
         $linkFound = 0;