From 1f1a06eae57099883e955224a21ceaf4da95fe32 Mon Sep 17 00:00:00 2001 From: Maksymilian Gala Date: Mon, 13 Jan 2025 15:14:08 +0100 Subject: [PATCH] Allow user to access their own DOB --- app/controllers/api/v0/persons_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/api/v0/persons_controller.rb b/app/controllers/api/v0/persons_controller.rb index da6e78f4f81..a387ec884e2 100644 --- a/app/controllers/api/v0/persons_controller.rb +++ b/app/controllers/api/v0/persons_controller.rb @@ -17,7 +17,7 @@ def index def show person = Person.current.includes(:user, :ranksSingle, :ranksAverage).find_by_wca_id!(params[:wca_id]) private_attributes = [] - if current_user && current_user.can_admin_results? + if current_user && (current_user.can_admin_results? || current_user&.person == person) private_attributes = %w[incorrect_wca_id_claim_count dob] end render json: person_to_json(person, private_attributes)