dendi-wang/thingsboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix permission check for saveEntityView

Browse Source
This commit is contained in:
Igor Kulikov 2020-08-04 15:10:05 +03:00
parent 974bfd39a5
commit 016191f3d9
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
application/src/main/java/org/thingsboard/server/controller/EntityViewController.java
View File

@ -116,7 +116,7 @@ public class EntityViewController extends BaseController {
accessControlService accessControlService
.checkPermission(getCurrentUser(), Resource.ENTITY_VIEW, Operation.CREATE, null, entityView); .checkPermission(getCurrentUser(), Resource.ENTITY_VIEW, Operation.CREATE, null, entityView);
} else { } else {
EntityView existingEntityView = checkNotNull(entityViewService.findEntityViewById(getCurrentUser().getTenantId(), entityView.getId())); EntityView existingEntityView = checkEntityViewId(entityView.getId(), Operation.READ);
if (existingEntityView.getKeys() != null) { if (existingEntityView.getKeys() != null) {
if (existingEntityView.getKeys().getAttributes() != null) { if (existingEntityView.getKeys().getAttributes() != null) {
futures.add(deleteAttributesFromEntityView(existingEntityView, DataConstants.CLIENT_SCOPE, existingEntityView.getKeys().getAttributes().getCs(), getCurrentUser())); futures.add(deleteAttributesFromEntityView(existingEntityView, DataConstants.CLIENT_SCOPE, existingEntityView.getKeys().getAttributes().getCs(), getCurrentUser()));