This patch addresses an issue with the person details publish API endpoint, whereby a user will be told they are unauthorized to publish a relationship they clearly are authorized to publish.
I have updated the auth endpoint to look at the observer that owns the instance instead of the incorrect request parameter it was looking at before, and comparing that to who is logged into the system.
This patch addresses an issue with the person details publish API endpoint, whereby a user will be told they are unauthorized to publish a relationship they clearly are authorized to publish. I have updated the auth endpoint to look at the observer that owns the instance instead of the incorrect request parameter it was looking at before, and comparing that to who is logged into the system.