Mercurial > lada > lada-server
changeset 861:68348c675b13
Since LST has no netzbetreiberId, check if the user belongs to a LST in
authorization.
| author | Raimund Renkert <raimund.renkert@intevation.de> |
|---|---|
| date | Thu, 04 Feb 2016 09:40:20 +0100 |
| parents | 7c6b7c08d31d |
| children | 04bec189ca19 |
| files | src/main/java/de/intevation/lada/util/auth/MessungAuthorizer.java |
| diffstat | 1 files changed, 2 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/src/main/java/de/intevation/lada/util/auth/MessungAuthorizer.java Wed Feb 03 13:34:32 2016 +0100 +++ b/src/main/java/de/intevation/lada/util/auth/MessungAuthorizer.java Thu Feb 04 09:40:20 2016 +0100 @@ -74,7 +74,8 @@ LProbe probe = (LProbe)repository.getById( LProbe.class, messung.getProbeId(), "land").getData(); - if (!userInfo.getNetzbetreiber().contains(probe.getNetzbetreiberId())) { + if (!userInfo.getNetzbetreiber().contains(probe.getNetzbetreiberId()) && + !userInfo.getFunktionen().contains(3)) { messung.setOwner(false); messung.setReadonly(true); return messung;