[Lada-commits] [PATCH] Use the netzbetreiber id value instead of casting data to ort and request
Wald Commits
scm-commit at wald.intevation.org
Thu May 26 12:20:21 CEST 2016
# HG changeset patch
# User Raimund Renkert <raimund.renkert at intevation.de>
# Date 1464258015 -7200
# Node ID 391ef3356b6091327f0103ca3ac4b77b01677fba
# Parent ac79858743928aaf04db7cf67b2e512ae4d81686
Use the netzbetreiber id value instead of casting data to ort and request
netzbetreiberid again.
diff -r ac7985874392 -r 391ef3356b60 src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java
--- a/src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java Thu May 26 10:23:26 2016 +0200
+++ b/src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java Thu May 26 12:20:15 2016 +0200
@@ -12,7 +12,6 @@
import de.intevation.lada.util.rest.RequestMethod;
import de.intevation.lada.util.rest.Response;
-import de.intevation.lada.model.stamm.Ort;
public class NetzbetreiberAuthorizer extends BaseAuthorizer {
@@ -45,8 +44,7 @@
// XXX: this currently allows any user, regardless of function,
// to manipulate and delete any ort of his own netzbetreiber!
clazz.getName().equals("de.intevation.lada.model.stamm.Ort") &&
- userInfo.getNetzbetreiber().contains(
- ((Ort)data).getNetzbetreiberId()));
+ userInfo.getNetzbetreiber().contains(id));
}
@Override
More information about the Lada-commits
mailing list