Fix tenant admins filter for enforced 2FA

This commit is contained in:
VIacheslavKlimov 2025-10-03 11:18:56 +03:00
parent b71baed1d1
commit 19ef1e3577

View File

@ -556,6 +556,9 @@ public class UserServiceImpl extends AbstractCachedEntityService<UserCacheKey, U
public boolean matchesFilter(TenantId tenantId, SystemLevelUsersFilter filter, User user) {
switch (filter.getType()) {
case TENANT_ADMINISTRATORS -> {
if (user.isSystemAdmin() || user.isCustomerUser()) {
return false;
}
TenantAdministratorsFilter tenantAdministratorsFilter = (TenantAdministratorsFilter) filter;
if (isNotEmpty(tenantAdministratorsFilter.getTenantsIds())) {
return tenantAdministratorsFilter.getTenantsIds().contains(user.getTenantId().getId());