From b2cecb60256cbe46e111d1d35cc204eb77b4da70 Mon Sep 17 00:00:00 2001
From: Ainur <59531286+yagudin10@users.noreply.github.com>
Date: Mon, 18 Apr 2022 15:29:44 +0300
Subject: [PATCH] CB-1906 throw exception if user has no roles (#771)

* CB-1906 throw exception if user has no roles

* CB-1906 throw exception if user has no permissions
---
 .../io/cloudbeaver/service/auth/impl/WebServiceAuthImpl.java  | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server/bundles/io.cloudbeaver.service.auth/src/io/cloudbeaver/service/auth/impl/WebServiceAuthImpl.java b/server/bundles/io.cloudbeaver.service.auth/src/io/cloudbeaver/service/auth/impl/WebServiceAuthImpl.java
index c5449a21c1..5a26b75622 100644
--- a/server/bundles/io.cloudbeaver.service.auth/src/io/cloudbeaver/service/auth/impl/WebServiceAuthImpl.java
+++ b/server/bundles/io.cloudbeaver.service.auth/src/io/cloudbeaver/service/auth/impl/WebServiceAuthImpl.java
@@ -227,6 +227,10 @@ public class WebServiceAuthImpl implements DBWServiceAuth {
                 providerConfig,
                 userCredentials);
 
+            if (securityController.getUserPermissions(userId).isEmpty()) {
+                throw new DBWebException("Access denied (no permissions)");
+            }
+
             WebAuthInfo authInfo = new WebAuthInfo(
                 webSession,
                 user,