Mercurial > lada > lada-server
diff src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java @ 1088:cf03bdd59767
Code style.
| author | Tom Gottfried <tom@intevation.de> |
|---|---|
| date | Thu, 13 Oct 2016 18:35:28 +0200 |
| parents | 391ef3356b60 |
| children | 7730d9cfc22e |
line wrap: on
line diff
--- a/src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java Thu Oct 13 17:23:11 2016 +0200 +++ b/src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java Thu Oct 13 18:35:28 2016 +0200 @@ -37,14 +37,16 @@ ) { return false; } - return (method == RequestMethod.POST || - method == RequestMethod.PUT || - method == RequestMethod.DELETE) && - (userInfo.getFunktionenForNetzbetreiber(id).contains(4) || + return (method == RequestMethod.POST + || method == RequestMethod.PUT + || method == RequestMethod.DELETE + ) && ( + userInfo.getFunktionenForNetzbetreiber(id).contains(4) // XXX: this currently allows any user, regardless of function, // to manipulate and delete any ort of his own netzbetreiber! - clazz.getName().equals("de.intevation.lada.model.stamm.Ort") && - userInfo.getNetzbetreiber().contains(id)); + || clazz.getName().equals("de.intevation.lada.model.stamm.Ort") + && userInfo.getNetzbetreiber().contains(id) + ); } @Override