archesproject/arches

Node value endpoint checks perms for node instead of nodegroup

Closed this issue · 0 comments

The node_value endpoint checks nodegroup permissions against a node rather than the node's nodegroup. With improvements to permissions, this can cause the permission check to return the wrong result.