Mercurial > lada > lada-server
diff src/main/java/de/intevation/lada/rest/KommentarMService.java @ 821:487c6d8c9d7b statusworkflow
No authorization is given if all objects are requested.
author | Tom Gottfried <tom@intevation.de> |
---|---|
date | Wed, 09 Dec 2015 16:51:31 +0100 |
parents | b04e55896104 |
children | 2fe625c91ab3 |
line wrap: on
line diff
--- a/src/main/java/de/intevation/lada/rest/KommentarMService.java Wed Dec 09 16:29:57 2015 +0100 +++ b/src/main/java/de/intevation/lada/rest/KommentarMService.java Wed Dec 09 16:51:31 2015 +0100 @@ -87,12 +87,14 @@ /** * Get all KommentarM objects. * <p> - * The requested objects can be filtered using a URL parameter named + * The requested objects have to be filtered using an URL parameter named * messungsId. * <p> * Example: http://example.com/mkommentar?messungsId=[ID] * - * @return Response object containing all (filtered) KommentarM objects. + * @return Response object containing filtered KommentarM objects. + * Status-Code 699 if parameter is missing or requested objects are + * not authorized. */ @GET @Path("/") @@ -118,7 +120,8 @@ LMessung.class, id, "land"); - if (!authorization.isAuthorized(authorization.getInfo(request), messung)) { + if (!authorization.isAuthorized( + authorization.getInfo(request), messung)) { if (!authorization.isAuthorized(id, LMessung.class)) { return new Response(false, 699, null); }