fix policy for next_stage

etalab · Jan 15, 2025 · 97cb2b9 · 97cb2b9
1 parent 446268a
commit 97cb2b9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/policies/authorization_request_policy.rb b/app/policies/authorization_request_policy.rb
@@ -72,7 +72,8 @@ def transfer?
   end
 
   def start_next_stage?
-    record.definition.next_stage? &&
+    same_user_and_organization? &&
+      record.definition.next_stage? &&
       record.validated?
   end