From a964dcda4750010b9df13f8a0fac631ce3996ce9 Mon Sep 17 00:00:00 2001
From: Axel Uhl <axel.uhl@sap.com>
Date: Tue, 17 Feb 2015 18:12:00 +0100
Subject: [PATCH] require authenticated user to create UserDTO

---
 .../src/com/sap/sse/security/impl/SecurityServiceImpl.java      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java b/java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
index 830403f7b44..778ef3efb92 100755
--- a/java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
+++ b/java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
@@ -631,7 +631,7 @@ public class SecurityServiceImpl extends RemoteServiceServlet implements Replica
     public User getCurrentUser() {
         final User result;
         Subject subject = SecurityUtils.getSubject();
-        if (subject == null) {
+        if (subject == null || !subject.isAuthenticated()) {
             result = null;
         } else {
             String username = SessionUtils.loadUsername();