mirror of
https://github.com/opf/openproject.git
synced 2026-06-14 03:30:14 +00:00
fa784d5f26
Previously there was a separate permissions check for /api/v3/versions/:id. This check at least looked like it was inconsistent with the visible-scope. Using the scope both for /api/v3/versions and /api/v3/versions/:id ensures that both will return results consistent with each other. As part of this change, the manage_versions permission was also added into the Version.visible scope and the Version#visible? method, because it was missing so far from those places.