Fix minor security vulnerability

diff --git a/app/models.py b/app/models.py
index 3d65b322ad7185f9e39a9d99aed88d80a43de8ea..61b6e5670d4e9acaaf0e26a7f3779dd468b12545 100644 (file)
--- a/app/models.py
+++ b/app/models.py
@@ -847,12 +847,11 @@ class PackageRelease(db.Model):
                                name=self.package.name,
                                id=self.id)
 
-
        def __init__(self):
                self.releaseDate = datetime.datetime.now()
 
        def approve(self, user):
-               if self.package.approved and \
+               if self.package.approved or \
                                not self.package.checkPerm(user, Permission.APPROVE_RELEASE):
                        return False