Skip to content

Commit 209e230

Browse files
feat(Preview Unit): Forbid preview of units owned by an inactive user
1 parent 7e7177e commit 209e230

3 files changed

Lines changed: 11 additions & 0 deletions

File tree

src/main/java/org/wise/portal/domain/user/User.java

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,4 +55,6 @@ public interface User extends Persistable, Comparable<User> {
5555
boolean isTrustedAuthor();
5656

5757
List<String> getRoles();
58+
59+
boolean isEnabled();
5860
}

src/main/java/org/wise/portal/domain/user/impl/UserImpl.java

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -158,4 +158,9 @@ public boolean equals(Object obj) {
158158
public int compareTo(User o) {
159159
return getId().compareTo(o.getId());
160160
}
161+
162+
@Override
163+
public boolean isEnabled() {
164+
return this.getUserDetails().isEnabled();
165+
}
161166
}

src/main/java/org/wise/portal/presentation/web/controllers/InformationController.java

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -194,6 +194,10 @@ public void handleGetConfigWISE5Preview(HttpServletRequest request, HttpServletR
194194
addCommonConfigParameters(request, config, project, rawProjectUrl);
195195
} else {
196196
Project project = projectService.getById(Long.parseLong(projectIdStr));
197+
if (!project.getOwner().isEnabled()) {
198+
response.setStatus(HttpServletResponse.SC_FORBIDDEN);
199+
return;
200+
}
197201
addCommonConfigParameters(request, config, project);
198202
}
199203

0 commit comments

Comments
 (0)