fix api permission. #687

datacite · Dec 15, 2020 · 01e64e5 · 01e64e5
1 parent 6ce30b6
commit 01e64e5
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/app/serializers/repository_serializer.rb b/app/serializers/repository_serializer.rb
@@ -56,6 +56,19 @@ class RepositorySerializer
     object.password.present?
   end
 
+  attribute :system_email,
+            if:
+              Proc.new { |object, params|
+                params[:current_ability] &&
+                  params[:current_ability].can?(
+                    :read_contact_information,
+                    object,
+                  ) ==
+                    true
+              } do |object|
+    object.system_email
+  end
+
   attribute :service_email,
             if:
               Proc.new { |object, params|