commit for MIFOSX-1671 (User with 'ALL_FUNCTIONS_READ' permission does not have access to /users/{userId} resource)
This commit is contained in:
+1
-1
@@ -489,7 +489,7 @@ public class AppUser extends AbstractPersistable<Long> implements PlatformUser {
|
||||
// abstain from validation as user allowed fetch their own data no
|
||||
// matter what permissions they have.
|
||||
} else {
|
||||
validateHasPermissionTo(function);
|
||||
validateHasReadPermission(function);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user