Mercurial > lada > lada-server
changeset 329:5c996cf50437
Fixed authorization in exporter.
| author | Raimund Renkert <rrenkert@intevation.de> |
|---|---|
| date | Tue, 27 Aug 2013 15:25:59 +0200 |
| parents | 835eec282baa |
| children | 046cdc094c72 |
| files | src/main/java/de/intevation/lada/rest/LAFExportService.java |
| diffstat | 1 files changed, 1 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/src/main/java/de/intevation/lada/rest/LAFExportService.java Tue Aug 27 09:47:07 2013 +0200 +++ b/src/main/java/de/intevation/lada/rest/LAFExportService.java Tue Aug 27 15:25:59 2013 +0200 @@ -76,7 +76,7 @@ ResponseBuilder response = Response.status(Status.FORBIDDEN); return response.build(); } - if (!authentication.hasAccess(header, probeId) || + if (!authentication.hasAccess(header, probeId) && !authorization.isReadOnly(probeId)) { ResponseBuilder response = Response.status(Status.FORBIDDEN); return response.build();