aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAnton Tananaev <anton@traccar.org>2022-11-01 17:06:51 -0700
committerAnton Tananaev <anton@traccar.org>2022-11-01 17:06:51 -0700
commitd5ac6aa371b5dfd9a6613e693a6afc711fb740df (patch)
tree764ce7ab16373e8e3d28b27cf09b520267648f39
parent87d54329d8d6ba14f37e15967079bcfc7299228c (diff)
downloadtrackermap-server-d5ac6aa371b5dfd9a6613e693a6afc711fb740df.tar.gz
trackermap-server-d5ac6aa371b5dfd9a6613e693a6afc711fb740df.tar.bz2
trackermap-server-d5ac6aa371b5dfd9a6613e693a6afc711fb740df.zip
Improve permission check
-rw-r--r--src/main/java/org/traccar/api/security/PermissionsService.java2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/main/java/org/traccar/api/security/PermissionsService.java b/src/main/java/org/traccar/api/security/PermissionsService.java
index 0d4877fdb..71acb3d48 100644
--- a/src/main/java/org/traccar/api/security/PermissionsService.java
+++ b/src/main/java/org/traccar/api/security/PermissionsService.java
@@ -104,7 +104,7 @@ public class PermissionsService {
} else if (clazz.equals(Device.class)) {
denied = getServer().getDeviceReadonly() || getUser(userId).getDeviceReadonly()
|| addition && getUser(userId).getDeviceLimit() == 0;
- if (addition && getUser(userId).getDeviceLimit() > 0) {
+ if (!denied && addition && getUser(userId).getDeviceLimit() > 0) {
int deviceCount = storage.getObjects(Device.class, new Request(
new Columns.Include("id"),
new Condition.Permission(User.class, userId, Device.class))).size();