eclipse-sailing-analytics/sailing-analytics
1
0
Fork 0
mirror of https://github.com/eclipse-sailing-analytics/sailing-analytics.git synced 2026-09-22 21:55:39 +00:00
Code Activity

fixed urgent bug for password change security check in UserManagementWriteService;

Browse Source 
this as aftermath to 3cdd5f209e
This commit is contained in:
Axel Uhl
2024-08-01 13:53:26 +02:00
parent 05ec1bd2b8
commit 807b179ff0
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/server/UserManagementWriteServiceImpl.java
+3 -2
View File
@@ -297,8 +297,9 @@ public class UserManagementWriteServiceImpl extends UserManagementServiceImpl im
(passwordResetSecret != null && getSecurityService().checkPasswordResetSecret(username, passwordResetSecret)))
// but in any case the user as which they authenticate in one of these ways has to have the UPDATE permission
&& PermissionChecker.isPermitted(user.getPermissionType().getPermission(DefaultActions.UPDATE),
user, getSecurityService().getAllUser(), getSecurityService().getOwnership(user.getIdentifier()).getAnnotation(),
getSecurityService().getAccessControlList(user.getIdentifier()).getAnnotation()))) {
user, getSecurityService().getAllUser(),
getSecurityService().getOwnership(user.getIdentifier())==null?null:getSecurityService().getOwnership(user.getIdentifier()).getAnnotation(),
getSecurityService().getAccessControlList(user.getIdentifier())==null?null:getSecurityService().getAccessControlList(user.getIdentifier()).getAnnotation()))) {
getSecurityService().updateSimpleUserPassword(username, newPassword);
sendPasswordChangedMailAsync(username);
} else {