routers/api/v1/repo/attachments.go

@@ -40,9 +40,13 @@ func checkDatasetPermission(ctx *context.APIContext) string {
 	if err != nil {
 		log.Warn("can not find repo permission for user", err)
 		return "dataset.query_dataset_fail"
+	} else {
+		log.Info("permission.AccessMode=" + string(permission.AccessMode))
+	}
+	if permission.AccessMode >= models.AccessModeAdmin {
+		return ""
 	}
 	if !permission.CanWrite(models.UnitTypeDatasets) {
-
 		return "error.no_right"
 	}
 	return ""