From 01e64e516619dc01438b5d374c9327af8cac0b91 Mon Sep 17 00:00:00 2001
From: Martin Fenner <martin.fenner@datacite.org>
Date: Tue, 15 Dec 2020 10:18:18 +0100
Subject: [PATCH] fix api permission. #687

---
 app/serializers/repository_serializer.rb | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/app/serializers/repository_serializer.rb b/app/serializers/repository_serializer.rb
index 6d45f4336..0e4c372f1 100644
--- a/app/serializers/repository_serializer.rb
+++ b/app/serializers/repository_serializer.rb
@@ -56,6 +56,19 @@ class RepositorySerializer
     object.password.present?
   end
 
+  attribute :system_email,
+            if:
+              Proc.new { |object, params|
+                params[:current_ability] &&
+                  params[:current_ability].can?(
+                    :read_contact_information,
+                    object,
+                  ) ==
+                    true
+              } do |object|
+    object.system_email
+  end
+
   attribute :service_email,
             if:
               Proc.new { |object, params|