From 9e63a098e4f70ded6ef406eaad5df83dcb4467ab Mon Sep 17 00:00:00 2001
From: Daniel Gerhardt <code@dgerhardt.net>
Date: Mon, 27 Mar 2017 15:14:56 +0200
Subject: [PATCH] Do not manually split config parameter
---
.../arsnova/security/ApplicationPermissionEvaluator.java | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
diff --git a/src/main/java/de/thm/arsnova/security/ApplicationPermissionEvaluator.java b/src/main/java/de/thm/arsnova/security/ApplicationPermissionEvaluator.java
index d60ca18ab..7a87e79c3 100644
--- a/src/main/java/de/thm/arsnova/security/ApplicationPermissionEvaluator.java
+++ b/src/main/java/de/thm/arsnova/security/ApplicationPermissionEvaluator.java
@@ -42,7 +42,7 @@ import java.util.Arrays;
public class ApplicationPermissionEvaluator implements PermissionEvaluator {
@Value("${security.admin-accounts}")
- private String adminAccounts;
+ private String[] adminAccounts;
@Autowired
private IDatabaseDao dao;
@@ -95,9 +95,7 @@ public class ApplicationPermissionEvaluator implements PermissionEvaluator {
private boolean checkAdminPermission(final String username) {
/* TODO: only allow accounts from arsnova db */
- String[] splittedAdminNames = adminAccounts.split(",");
-
- return Arrays.asList(splittedAdminNames).contains(username);
+ return Arrays.asList(adminAccounts).contains(username);
}
private boolean checkSessionPermission(
--
GitLab