RED-10224: Editing entities - Access is denied but updates value anyway

This commit is contained in:
maverickstuder 2024-10-23 09:30:36 +02:00
parent 9203993d6e
commit 9c4804d239

View File

@ -189,8 +189,6 @@ public class DictionaryService {
@PreAuthorize("hasAuthority('" + ADD_UPDATE_DOSSIER_DICTIONARY_TYPE + "')")
public void updateDossierType(String type, String dossierTemplateId, UpdateTypeValue typeValue, String dossierId, TypeEntity typeEntity) {
accessControlService.verifyUserIsDossierOwner(dossierId);
if (typeEntity.isDossierDictionaryOnly()) {
dictionaryManagementService.updateTypeValue(toTypeId(type, dossierTemplateId, dossierId),
Type.builder()