#1132 - Fixed similar logic flaw in ComponentQueryManager

DependencyTrack · Aug 7, 2021 · 18b0a3f · 18b0a3f
1 parent 2b27789
commit 18b0a3f
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/src/main/java/org/dependencytrack/persistence/ComponentQueryManager.java b/src/main/java/org/dependencytrack/persistence/ComponentQueryManager.java
@@ -498,11 +498,10 @@ private void preprocessACLs(final Query<Component> query, final String inputFilt
             if (teams != null && teams.size() > 0) {
                 final StringBuilder sb = new StringBuilder();
                 for (int i = 0, teamsSize = teams.size(); i < teamsSize; i++) {
-                    //final Team team = teams.get(i);
-                    final Team team = super.getObjectById(Team.class, teams.get(0).getId());
+                    final Team team = super.getObjectById(Team.class, teams.get(i).getId());
                     sb.append(" project.accessTeams.contains(:team").append(i).append(") ");
                     params.put("team" + i, team);
-                    if (i < teamsSize-2) {
+                    if (i < teamsSize-1) {
                         sb.append(" || ");
                     }
                 }