From ab1badc6275b99c65f68d74b48a991f0784cc48a Mon Sep 17 00:00:00 2001
From: Daniel Gerhardt <code@dgerhardt.net>
Date: Mon, 14 Aug 2017 13:48:54 +0200
Subject: [PATCH] Fix permission handling for EntityService's `get` method
---
src/main/java/de/thm/arsnova/services/EntityService.java | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/src/main/java/de/thm/arsnova/services/EntityService.java b/src/main/java/de/thm/arsnova/services/EntityService.java
index f582665b9..28315ebcf 100644
--- a/src/main/java/de/thm/arsnova/services/EntityService.java
+++ b/src/main/java/de/thm/arsnova/services/EntityService.java
@@ -24,7 +24,7 @@ public class EntityService<T extends Entity> {
this.objectMapper = objectMapper;
}
- @PreAuthorize("hasPermission(type, #id, 'read')")
+ @PreAuthorize("hasPermission(#id, #this.this.getTypeName(), 'read')")
public T get(final String id) {
return repository.findOne(id);
}
@@ -67,4 +67,8 @@ public class EntityService<T extends Entity> {
public void delete(final T entity) {
repository.delete(entity);
}
+
+ public String getTypeName() {
+ return type.getSimpleName().toLowerCase();
+ }
}
--
GitLab