This commit is contained in:
Timothy Jaeryang Baek 2025-07-22 17:17:26 +04:00
parent dfdf94483b
commit 8bc7d85eac

View file

@ -509,7 +509,9 @@ def get_sources_from_items(
note = Notes.get_note_by_id(item.get("id")) note = Notes.get_note_by_id(item.get("id"))
if note and ( if note and (
user.role == "admin" or has_access(user.id, "read", note.access_control) user.role == "admin"
or note.user_id == user.id
or has_access(user.id, "read", note.access_control)
): ):
# User has access to the note # User has access to the note
query_result = { query_result = {