fix: Remove lCase() from checkRoleAccess controller name

bpamiri · claude · bpamiri · commit 203758aa12c6 · 2026-02-13T16:15:03.000-08:00
CockroachDB does case-sensitive string comparisons. The lCase() call
converted controller names to lowercase (e.g., 'usercontroller') but
permissions are stored in PascalCase (e.g., 'UserController'), causing
the permission query to always return 0 results and block all access.

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/app/controllers/Controller.cfc b/app/controllers/Controller.cfc
@@ -60,7 +60,7 @@ component extends="wheels.Controller" {
     }
 
     function checkRoleAccess(){
-        var controller = lCase(listLast(request.wheels.params.controller, "."));
+        var controller = listLast(request.wheels.params.controller, ".");
         var action = request.wheels.params.action;
         var accesspermission = model("RolePermission").findAll(
             select="roleId, permissionId, name, permissionName, permissionstatus, controller, permissiondescription",

Original file line number	Diff line number	Diff line change
`@@ -60,7 +60,7 @@ component extends="wheels.Controller" {`
`60`	`60`	`}`
`61`	`61`
`62`	`62`	`function checkRoleAccess(){`
`63`		`- var controller = lCase(listLast(request.wheels.params.controller, "."));`
	`63`	`+ var controller = listLast(request.wheels.params.controller, ".");`
`64`	`64`	`var action = request.wheels.params.action;`
`65`	`65`	`var accesspermission = model("RolePermission").findAll(`
`66`	`66`	`select="roleId, permissionId, name, permissionName, permissionstatus, controller, permissiondescription",`