CB-1906 throw exception if user has no roles (#771)

* CB-1906 throw exception if user has no roles * CB-1906 throw exception if user has no permissions
2026-09-24 16:04:36 +08:00 · 2022-04-18 15:29:44 +03:00
parent d65c1d526c
commit b2cecb6025
1 changed files with 4 additions and 0 deletions
@@ -227,6 +227,10 @@ public class WebServiceAuthImpl implements DBWServiceAuth {
                providerConfig,
                userCredentials);

+            if (securityController.getUserPermissions(userId).isEmpty()) {
+                throw new DBWebException("Access denied (no permissions)");
+            }
+
            WebAuthInfo authInfo = new WebAuthInfo(
                webSession,
                user,