[ACCESS-CHANGE]: Prioritize higher access level permission

Jaseci-Labs · Jan 17, 2025 · 877704f · 877704f
1 parent 8ae56fd
commit 877704f
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/jac-cloud/jac_cloud/plugin/jaseci.py b/jac-cloud/jac_cloud/plugin/jaseci.py
@@ -457,13 +457,13 @@ def check_access_level(to: Anchor) -> AccessLevel:
                 access_level = to_root.access.all
 
             level = to_root.access.roots.check(jroot.ref_id)
-            if level > AccessLevel.NO_ACCESS and access_level == AccessLevel.NO_ACCESS:
+            if level > AccessLevel.NO_ACCESS and access_level > level:
                 access_level = level
 
         # if target anchor have set allowed roots
         # if current root is allowed to target anchor
         level = to_access.roots.check(jroot.ref_id)
-        if level > AccessLevel.NO_ACCESS and access_level == AccessLevel.NO_ACCESS:
+        if level > AccessLevel.NO_ACCESS and access_level > level:
             access_level = level
 
         return access_level

diff --git a/jac/jaclang/plugin/default.py b/jac/jaclang/plugin/default.py
@@ -180,13 +180,13 @@ def check_access_level(to: Anchor) -> AccessLevel:
                 access_level = to_root.access.all
 
             level = to_root.access.roots.check(str(jroot.id))
-            if level > AccessLevel.NO_ACCESS and access_level == AccessLevel.NO_ACCESS:
+            if level > AccessLevel.NO_ACCESS and access_level < level:
                 access_level = level
 
         # if target anchor have set allowed roots
         # if current root is allowed to target anchor
         level = to_access.roots.check(str(jroot.id))
-        if level > AccessLevel.NO_ACCESS and access_level == AccessLevel.NO_ACCESS:
+        if level > AccessLevel.NO_ACCESS and access_level < level:
             access_level = level
 
         return access_level