zervo/seb-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fixed privilege check on createNew

Browse source
This commit is contained in:
anhefti 2021-04-20 16:18:21 +02:00
parent ec8f7c9258
commit ed8d98a40b
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/main/java/ch/ethz/seb/sebserver/webservice/weblayer/api/EntityController.java
View file

@ -284,8 +284,8 @@ public abstract class EntityController<T extends Entity, M extends Entity> {
defaultValue = UserService.USERS_INSTITUTION_AS_DEFAULT) final Long institutionId, defaultValue = UserService.USERS_INSTITUTION_AS_DEFAULT) final Long institutionId,
final HttpServletRequest request) { final HttpServletRequest request) {
// check modify privilege for requested institution and concrete entityType // check write privilege for requested institution and concrete entityType
this.checkModifyPrivilege(institutionId); this.checkWritePrivilege(institutionId);
final POSTMapper postMap = new POSTMapper(allRequestParams, request.getQueryString()) final POSTMapper postMap = new POSTMapper(allRequestParams, request.getQueryString())
.putIfAbsent(API.PARAM_INSTITUTION_ID, String.valueOf(institutionId)); .putIfAbsent(API.PARAM_INSTITUTION_ID, String.valueOf(institutionId));