[cvs] expresso commit by lhamel: admin gets full permissions

JCorporate Ltd jcorp at jcorp2.servlets.net
Fri Nov 12 23:41:25 PST 2004


Log Message:
-----------
admin gets full permissions

Modified Files:
--------------
    expresso/expresso-web/WEB-INF/src/com/jcorporate/expresso/services/controller/dbmaint:
        List.java

Revision Data
-------------
Index: List.java
===================================================================
RCS file: /home/javacorp/.cvs/expresso/expresso/expresso-web/WEB-INF/src/com/jcorporate/expresso/services/controller/dbmaint/List.java,v
retrieving revision 1.11
retrieving revision 1.12
diff -Lexpresso-web/WEB-INF/src/com/jcorporate/expresso/services/controller/dbmaint/List.java -Lexpresso-web/WEB-INF/src/com/jcorporate/expresso/services/controller/dbmaint/List.java -u -r1.11 -r1.12
--- expresso-web/WEB-INF/src/com/jcorporate/expresso/services/controller/dbmaint/List.java
+++ expresso-web/WEB-INF/src/com/jcorporate/expresso/services/controller/dbmaint/List.java
@@ -73,6 +73,7 @@
 import com.jcorporate.expresso.core.dataobjects.Securable;
 import com.jcorporate.expresso.core.db.DBException;
 import com.jcorporate.expresso.core.dbobj.SecuredDBObject;
+import com.jcorporate.expresso.core.misc.StringUtil;
 import com.jcorporate.expresso.core.security.User;
 import com.jcorporate.expresso.services.dbobj.Setup;
 
@@ -121,7 +122,7 @@
                     String allowInsecure = Setup.getValue(req.getDataContext(),
                                         ExpressoSchema.class.getName(),
                                         "insecureDBMaint");
-                    if (!("y".equalsIgnoreCase(allowInsecure))) {
+                    if (!(StringUtil.toBoolean(allowInsecure))) {
                         throw new SecurityException("Access to unsecured Objects not allowed");
                     }
                 }


More information about the cvs mailing list