Merge pull request #179 from glyptodon/GUAC-1188

GUAC-1188 Use canReadPermissions() - do not reimplement permission checks
This commit is contained in:
Mike Jumper
2015-05-13 21:55:35 -07:00

View File

@@ -151,9 +151,8 @@ public class SystemPermissionService
public SystemPermission retrievePermission(AuthenticatedUser user,
ModeledUser targetUser, SystemPermission.Type type) throws GuacamoleException {
// Only an admin can read permissions that aren't his own
if (user.getUser().getIdentifier().equals(targetUser.getIdentifier())
|| user.getUser().isAdministrator()) {
// Retrieve permissions only if allowed
if (canReadPermissions(user, targetUser)) {
// Read permission from database, return null if not found
SystemPermissionModel model = getPermissionMapper().selectOne(targetUser.getModel(), type);