# HG changeset patch
# User Raimund Renkert <raimund.renkert@intevation.de>
# Date 1464258015 -7200
# Node ID 391ef3356b6091327f0103ca3ac4b77b01677fba
# Parent  ac79858743928aaf04db7cf67b2e512ae4d81686
Use the netzbetreiber id value instead of casting data to ort and request
netzbetreiberid again.

diff -r ac7985874392 -r 391ef3356b60 src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java
--- a/src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java	Thu May 26 10:23:26 2016 +0200
+++ b/src/main/java/de/intevation/lada/util/auth/NetzbetreiberAuthorizer.java	Thu May 26 12:20:15 2016 +0200
@@ -12,7 +12,6 @@
 
 import de.intevation.lada.util.rest.RequestMethod;
 import de.intevation.lada.util.rest.Response;
-import de.intevation.lada.model.stamm.Ort;
 
 public class NetzbetreiberAuthorizer extends BaseAuthorizer {
 
@@ -45,8 +44,7 @@
             // XXX: this currently allows any user, regardless of function,
             // to manipulate and delete any ort of his own netzbetreiber!
              clazz.getName().equals("de.intevation.lada.model.stamm.Ort") &&
-             userInfo.getNetzbetreiber().contains(
-                 ((Ort)data).getNetzbetreiberId()));
+             userInfo.getNetzbetreiber().contains(id));
     }
 
     @Override