Project

General

Profile

« Previous | Next » 

Revision 9349

check for auth before doing asynch call to MN dirtySysMeta implementation

View differences:

MNResourceHandler.java
720 720
        }      
721 721
        final Date dateSysMetaLastModified = DateTimeMarshaller.deserializeDateToUTC(dateSysMetaLastModifiedStr);
722 722
        
723
        // check authorization before sending to implementation
724
        boolean authorized = MNodeService.getInstance(request).isAdminAuthorized(session);
725
        if (!authorized) {
726
        	String msg = "User is not authorized to call systemMetadataChanged";
727
            NotAuthorized failure = new NotAuthorized("1331", msg);
728
        	throw failure;
729
        }
730
        
723 731
        // run it in a thread to avoid connection timeout
724 732
        Runnable runner = new Runnable() {
725 733
            @Override

Also available in: Unified diff