From 5fd0aae6d92d99460cf4ce029766b4a9a84a84c9 Mon Sep 17 00:00:00 2001 From: ThanKarab <tkarabatsis@hotmail.com> Date: Wed, 12 Oct 2022 14:13:54 +0300 Subject: [PATCH] Fix for showing experiment on admin users. --- .../java/eu/hbp/mip/services/ExperimentService.java | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src/main/java/eu/hbp/mip/services/ExperimentService.java b/src/main/java/eu/hbp/mip/services/ExperimentService.java index 327f9ecf8..12d923f12 100644 --- a/src/main/java/eu/hbp/mip/services/ExperimentService.java +++ b/src/main/java/eu/hbp/mip/services/ExperimentService.java @@ -124,11 +124,11 @@ public class ExperimentService { logger.LogUserAction("Loading Experiment with uuid : " + uuid); experimentDAO = experimentRepository.loadExperiment(uuid, logger); - if ( - !experimentDAO.isShared() - && !experimentDAO.getCreatedBy().getUsername().equals(user.getUsername()) - && authenticationIsEnabled - && ClaimUtils.validateAccessRightsOnExperiments(authentication, logger) + if ( + authenticationIsEnabled + && !experimentDAO.isShared() + && !experimentDAO.getCreatedBy().getUsername().equals(user.getUsername()) + && !ClaimUtils.validateAccessRightsOnExperiments(authentication, logger) ) { logger.LogUserAction("Accessing Experiment is unauthorized."); throw new UnauthorizedException("You don't have access to the experiment."); -- GitLab