diff options
author | Anton Tananaev <anton@traccar.org> | 2022-06-04 10:38:49 -0700 |
---|---|---|
committer | Anton Tananaev <anton@traccar.org> | 2022-06-04 10:38:49 -0700 |
commit | 8c12ded81c5dce295fcb229c566209d784f55356 (patch) | |
tree | 335f01a30f5c26dc1d5cf24c2c5dfded074a1cd1 /src/main/java/org/traccar/api/security | |
parent | fd84b0dcb86208c2c9c64fbe067cf7d4324892ac (diff) | |
download | trackermap-server-8c12ded81c5dce295fcb229c566209d784f55356.tar.gz trackermap-server-8c12ded81c5dce295fcb229c566209d784f55356.tar.bz2 trackermap-server-8c12ded81c5dce295fcb229c566209d784f55356.zip |
Remove maintenance manager
Diffstat (limited to 'src/main/java/org/traccar/api/security')
-rw-r--r-- | src/main/java/org/traccar/api/security/PermissionsService.java | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/main/java/org/traccar/api/security/PermissionsService.java b/src/main/java/org/traccar/api/security/PermissionsService.java index b4a375109..12a2189e9 100644 --- a/src/main/java/org/traccar/api/security/PermissionsService.java +++ b/src/main/java/org/traccar/api/security/PermissionsService.java @@ -138,13 +138,13 @@ public class PermissionsService { public <T extends BaseModel> void checkPermission( Class<T> clazz, long userId, long objectId) throws StorageException, SecurityException { if (!getUser(userId).getAdministrator() && !(clazz.equals(User.class) && userId == objectId)) { - var objects = storage.getObjects(clazz, new Request( + var object = storage.getObject(clazz, new Request( new Columns.Include("id"), new Condition.And( new Condition.Equals("id", "id", objectId), new Condition.Permission( User.class, userId, clazz.equals(User.class) ? ManagedUser.class : clazz)))); - if (!objects.isEmpty()) { + if (object == null) { throw new SecurityException(clazz.getSimpleName() + " access denied"); } } |