From 4d5646304266299a47a1cd5f03c2cbead5be8a08 Mon Sep 17 00:00:00 2001
From: Dennis Eichhorn <spl1nes.com@googlemail.com>
Date: Sat, 16 Sep 2017 11:47:52 +0200
Subject: [PATCH] Fix permission condition

---
 Controller.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Controller.php b/Controller.php
index 048253e..24d49c2 100644
--- a/Controller.php
+++ b/Controller.php
@@ -166,7 +166,7 @@ class Controller extends ModuleAbstract implements WebInterface
         if (!($task->getCreatedBy()->getId() === $accountId
             || $task->isCc($accountId)
             || $task->isForwarded($accountId))
-            || !$this->app->accountManager->get($accountId)->hasPermission(
+            && !$this->app->accountManager->get($accountId)->hasPermission(
                 PermissionType::READ, 1, $this->app->appName, self::MODULE_ID, PermissionState::TASK, $task->getId())
         ) {
             $view->setTemplate('/Web/Backend/Error/403_inline');