svn commit: r1779127 - /openmeetings/application/branches/3.1.x/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/WebSession.java

[solomax]

Author: solomax
Date: Tue Jan 17 03:42:22 2017
New Revision: 1779127

URL: http://svn.apache.org/viewvc?rev=1779127&view=rev
Log:
[OPENMEETINGS-1530] security hash is fixed

Modified:
    
openmeetings/application/branches/3.1.x/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/WebSession.java

Modified: 
openmeetings/application/branches/3.1.x/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/WebSession.java
URL: 
http://svn.apache.org/viewvc/openmeetings/application/branches/3.1.x/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/WebSession.java?rev=1779127&r1=1779126&r2=1779127&view=diff
==============================================================================
--- 
openmeetings/application/branches/3.1.x/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/WebSession.java
 (original)
+++ 
openmeetings/application/branches/3.1.x/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/WebSession.java
 Tue Jan 17 03:42:22 2017
@@ -296,7 +296,7 @@ public class WebSession extends Abstract
                userId = u.getId();
                if (rights == null || rights.isEmpty()) {
                        Set<Right> r = new HashSet<>(u.getRights());
-                       if (!AuthLevelUtil.hasAdminLevel(r)) {
+                       if (u.getGroupUsers() != null && 
!AuthLevelUtil.hasAdminLevel(r)) {
                                for (GroupUser gu : u.getGroupUsers()) {
                                        if (gu.isModerator()) {
                                                r.add(Right.GroupAdmin);