# HG changeset patch # User Raimund Renkert # Date 1454575220 -3600 # Node ID 68348c675b132b90011ebc7a059b79fac2018341 # Parent 7c6b7c08d31d25a85f1ffc8e077a333496921581 Since LST has no netzbetreiberId, check if the user belongs to a LST in authorization. diff -r 7c6b7c08d31d -r 68348c675b13 src/main/java/de/intevation/lada/util/auth/MessungAuthorizer.java --- a/src/main/java/de/intevation/lada/util/auth/MessungAuthorizer.java Wed Feb 03 13:34:32 2016 +0100 +++ b/src/main/java/de/intevation/lada/util/auth/MessungAuthorizer.java Thu Feb 04 09:40:20 2016 +0100 @@ -74,7 +74,8 @@ LProbe probe = (LProbe)repository.getById( LProbe.class, messung.getProbeId(), "land").getData(); - if (!userInfo.getNetzbetreiber().contains(probe.getNetzbetreiberId())) { + if (!userInfo.getNetzbetreiber().contains(probe.getNetzbetreiberId()) && + !userInfo.getFunktionen().contains(3)) { messung.setOwner(false); messung.setReadonly(true); return messung;