简柏林 / thingskit · Commits

Commit 016191f3d9f67b2e5bb688d99df19743d72ad4e3

Authored by Igor Kulikov
1 parent 974bfd39

Fix permission check for saveEntityView

Inline Side-by-side
Showing 1 changed file with 1 additions and 1 deletions
@@ -116,7 +116,7 @@ public class EntityViewController extends BaseController { @@ -116,7 +116,7 @@ public class EntityViewController extends BaseController {
116 accessControlService 116 accessControlService
117 .checkPermission(getCurrentUser(), Resource.ENTITY_VIEW, Operation.CREATE, null, entityView); 117 .checkPermission(getCurrentUser(), Resource.ENTITY_VIEW, Operation.CREATE, null, entityView);
118 } else { 118 } else {
119 - EntityView existingEntityView = checkNotNull(entityViewService.findEntityViewById(getCurrentUser().getTenantId(), entityView.getId())); 119 + EntityView existingEntityView = checkEntityViewId(entityView.getId(), Operation.READ);
120 if (existingEntityView.getKeys() != null) { 120 if (existingEntityView.getKeys() != null) {
121 if (existingEntityView.getKeys().getAttributes() != null) { 121 if (existingEntityView.getKeys().getAttributes() != null) {
122 futures.add(deleteAttributesFromEntityView(existingEntityView, DataConstants.CLIENT_SCOPE, existingEntityView.getKeys().getAttributes().getCs(), getCurrentUser())); 122 futures.add(deleteAttributesFromEntityView(existingEntityView, DataConstants.CLIENT_SCOPE, existingEntityView.getKeys().getAttributes().getCs(), getCurrentUser()));