add tamper protection
This commit is contained in:
@@ -21,7 +21,8 @@ class AppAccessManager : AccessManager {
|
||||
return database.find(EntityModel::class.java)
|
||||
.where()
|
||||
.eq("name", entity)
|
||||
.findOne()?.actions
|
||||
.findOne()
|
||||
?.actions
|
||||
?.filter { it.equals(action, ignoreCase = true) }
|
||||
?.map { "role_${entity}_$it" } ?: emptyList()
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user