[
https://issues.apache.org/jira/browse/OFBIZ-12741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Daniel Watford updated OFBIZ-12741:
-----------------------------------
Description:
ModelPermission's evalPermissionService method will call a permission-service
as part of checking whether a user is permitted to execute a service.
If the permission service returns an error response then a Null Pointer
Exception will be thrown by evalPermissionService since the error response is
not trapped.
Amend evalPermissionService to detect an error response from the permission
service and return it unchanged to the caller.
Further, amend evalPermissionService to check for the presence of the
hasPermission attribute in the response before attempting to retrieve and
convert it to a boolean.
was:
ModelPermission's evalPermissionService method will call a permission-service
as part of checking whether a user is permitted to execute a service.
If the permission service returns an error response then a Null Point Exception
will be thrown by evalPermissionService since the error response is not trapped.
Amend evalPermissionService to detect an error response from the permission
service and return it unchanged to the caller.
Further, amend evalPermissionService to check for the presence of the
hasPermission attribute in the response before attempting to retrieve and
convert it to a boolean.
> ModelPermission should handle error responses from permission-services
> ----------------------------------------------------------------------
>
> Key: OFBIZ-12741
> URL: https://issues.apache.org/jira/browse/OFBIZ-12741
> Project: OFBiz
> Issue Type: Bug
> Components: framework/service
> Affects Versions: 22.01.01
> Reporter: Daniel Watford
> Assignee: Daniel Watford
> Priority: Major
>
> ModelPermission's evalPermissionService method will call a permission-service
> as part of checking whether a user is permitted to execute a service.
> If the permission service returns an error response then a Null Pointer
> Exception will be thrown by evalPermissionService since the error response is
> not trapped.
> Amend evalPermissionService to detect an error response from the permission
> service and return it unchanged to the caller.
> Further, amend evalPermissionService to check for the presence of the
> hasPermission attribute in the response before attempting to retrieve and
> convert it to a boolean.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
