Merge branch 'RED-10224' into 'release/2.465.x'

RED-10224: Editing entities - Access is denied but updates value anyway

See merge request redactmanager/persistence-service!790
This commit is contained in:
Maverick Studer 2024-10-23 09:44:41 +02:00
commit a5cbae2833

View File

@ -189,8 +189,6 @@ public class DictionaryService {
@PreAuthorize("hasAuthority('" + ADD_UPDATE_DOSSIER_DICTIONARY_TYPE + "')")
public void updateDossierType(String type, String dossierTemplateId, UpdateTypeValue typeValue, String dossierId, TypeEntity typeEntity) {
accessControlService.verifyUserIsDossierOwner(dossierId);
if (typeEntity.isDossierDictionaryOnly()) {
dictionaryManagementService.updateTypeValue(toTypeId(type, dossierTemplateId, dossierId),
Type.builder()