Fixed assertion OwnsEntityAssertion when the check is done against a …

…doctrine proxy.
omeka · Apr 8, 2024 · fb64bb5 · fb64bb5
1 parent 2c1e292
commit fb64bb5
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/application/src/Permissions/Assertion/OwnsEntityAssertion.php b/application/src/Permissions/Assertion/OwnsEntityAssertion.php
@@ -12,9 +12,13 @@ class OwnsEntityAssertion implements AssertionInterface
     public function assert(Acl $acl, RoleInterface $role = null,
         ResourceInterface $resource = null, $privilege = null
     ) {
+        if (!$role || !$role instanceof \Omeka\Entity\User) {
+            return false;
+        }
         if ($resource instanceof Value) {
             $resource = $resource->getResource();
         }
-        return $role && $role === $resource->getOwner();
+        $owner = $resource->getOwner();
+        return $owner && $role->getId() === $owner->getId();
     }
 }