superadmin file download

2025-01-02 21:53:41 +02:00
parent 313d7f8408
commit 4edee2971a
1 changed files with 1 additions and 0 deletions
@@ -42,6 +42,7 @@ module Api

      is_authorized = attachment.name.in?(%w[logo preview_images]) ||
                      (current_user && attachment.record.account.id == current_user.account_id) ||
+                      (current_user && !Docuseal.multitenant? && current_user.role == 'superadmin') ||
                      !attachment.record.account.account_configs
                                 .find_or_initialize_by(key: AccountConfig::DOWNLOAD_LINKS_AUTH_KEY).value