hazza/DSpace
1
0
Fork 0
mirror of https://github.com/DSpace/DSpace.git synced 2025-10-07 18:14:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1606 from 4Science/DS-3441-5x

Browse Source 
DS-3441 READ permission on the Collection object not respected by the JSPUI (5_x)
This commit is contained in:
Bram Luyten
2017-01-06 18:19:00 +01:00
committed by GitHub
parent f7b6c83e99 79014ed943
commit 77a4da32ec
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
dspace-jspui/src/main/java/org/dspace/app/webui/servlet/HandleServlet.java
View File

@@ -490,11 +490,15 @@ public class HandleServlet extends DSpaceServlet
* the HTTP response * the HTTP response
* @param community * @param community
* the community * the community
* @throws AuthorizeException
*/ */
private void communityHome(Context context, HttpServletRequest request, private void communityHome(Context context, HttpServletRequest request,
HttpServletResponse response, Community community) HttpServletResponse response, Community community)
throws ServletException, IOException, SQLException throws ServletException, IOException, SQLException, AuthorizeException
{ {
// Ensure the user has authorisation
AuthorizeManager.authorizeAction(context, community, Constants.READ);
// Handle click on a browse or search button // Handle click on a browse or search button
if (!handleButton(request, response, community.getHandle())) if (!handleButton(request, response, community.getHandle()))
{ {
@@ -589,6 +593,9 @@ public class HandleServlet extends DSpaceServlet
Collection collection) throws ServletException, IOException, Collection collection) throws ServletException, IOException,
SQLException, AuthorizeException SQLException, AuthorizeException
{ {
// Ensure the user has authorisation
AuthorizeManager.authorizeAction(context, collection, Constants.READ);
// Handle click on a browse or search button // Handle click on a browse or search button
if (!handleButton(request, response, collection.getHandle())) if (!handleButton(request, response, collection.getHandle()))
{ {