Fixing an issue discovered by test case.

6 years ago · acba31d29d
1 changed files with 1 additions and 1 deletions
--- a/packages/server/src/utilities/security/permissions.js
+++ b/packages/server/src/utilities/security/permissions.js
@ -138,7 +138,7 @@ exports.doesHaveResourcePermission = (
 ) => {
  // set foundSub to not subResourceId, incase there is no subResource
  let foundMain = false,
-    foundSub = !subResourceId
+    foundSub = false
  for (let [resource, level] of Object.entries(permissions)) {
    const levels = getAllowedLevels(level)
    if (resource === resourceId && levels.indexOf(permLevel) !== -1) {