Fix Publish Forbid issue (#13078)

OrchardCMS · Jan 13, 2023 · da1691c · da1691c
1 parent 1cd5e66
commit da1691c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/OrchardCore.Modules/OrchardCore.Contents/Controllers/AdminController.cs b/src/OrchardCore.Modules/OrchardCore.Contents/Controllers/AdminController.cs
@@ -406,7 +406,7 @@ public async Task<IActionResult> CreateAndPublishPOST(string id, [Bind(Prefix =
 
             var stayOnSamePage = submitPublish == "submit.PublishAndContinue";
             // Pass a dummy contentitem to the authorization check to check for "own" variations permissions.
-            if (await _authorizationService.AuthorizeContentTypeAsync(User, CommonPermissions.PublishContent, id, CurrentUserId()))
+            if (!await _authorizationService.AuthorizeContentTypeAsync(User, CommonPermissions.PublishContent, id, CurrentUserId()))
             {
                 return Forbid();
             }
@@ -534,6 +534,7 @@ public async Task<IActionResult> EditAndPublishPOST(string contentItemId, [Bind(
             {
                 return Forbid();
             }
+
             return await EditPOST(contentItemId, returnUrl, stayOnSamePage, async contentItem =>
             {
                 await _contentManager.PublishAsync(contentItem);