Merge branch 'RED-10224-fp2' into 'master'

RED-10224: Editing entities - Access is denied but updates value anyway

Closes RED-10224

See merge request redactmanager/persistence-service!792
This commit is contained in:
Maverick Studer 2024-10-23 09:57:00 +02:00
commit 60e042587e

View File

@ -189,8 +189,6 @@ public class DictionaryService {
@PreAuthorize("hasAuthority('" + ADD_UPDATE_DOSSIER_DICTIONARY_TYPE + "')")
public void updateDossierType(String type, String dossierTemplateId, UpdateTypeValue typeValue, String dossierId, TypeEntity typeEntity) {
accessControlService.verifyUserIsDossierOwner(dossierId);
if (typeEntity.isDossierDictionaryOnly()) {
dictionaryManagementService.updateTypeValue(toTypeId(type, dossierTemplateId, dossierId),
Type.builder()