diff --git a/server/bundles/io.cloudbeaver.service.admin/src/io/cloudbeaver/service/admin/impl/WebServiceAdmin.java b/server/bundles/io.cloudbeaver.service.admin/src/io/cloudbeaver/service/admin/impl/WebServiceAdmin.java index 8749af51da..8f676b48ce 100644 --- a/server/bundles/io.cloudbeaver.service.admin/src/io/cloudbeaver/service/admin/impl/WebServiceAdmin.java +++ b/server/bundles/io.cloudbeaver.service.admin/src/io/cloudbeaver/service/admin/impl/WebServiceAdmin.java @@ -167,6 +167,9 @@ public class WebServiceAdmin implements DBWServiceAdmin { if (grantor == null) { throw new DBWebException("Cannot grant role in anonymous mode"); } + if (CommonUtils.equalObjects(user, webSession.getUser().getUserId())) { + throw new DBWebException("You cannot edit your own permissions"); + } try { WebRole[] userRoles = CBPlatform.getInstance().getApplication().getSecurityController().getUserRoles(user); List roleIds = Arrays.stream(userRoles).map(WebRole::getRoleId).collect(Collectors.toList());