loggerbean.logMessage(SecurityLogType.permissionDenied,permbean.getCurrentUser(),"Not enough rights to access image id: "+id+" for user "+ret.getUser());
loggerbean.sendMessage(MoyaEventType.USER_INSUFFICIENT_PERMISSIONS,permbean.getCurrentUser(),"Not enough rights to access image id: ",id," for user ",ret.getUser());
thrownewEJBAccessException("Not enough permissions to fetch image");
}
...
...
@@ -698,7 +698,7 @@ public class UserBean implements UserBeanLocal {
// At the very least it safeguards the situation if user gets another
// users gameid in somehow..
if(!permbean.isCurrentUser(gi.getEventUser())){
loggerbean.logMessage(SecurityLogType.permissionDenied,permbean.getCurrentUser(),"User tried to remove GameID from another user: "+gi.getEventUser());
loggerbean.sendMessage(MoyaEventType.USER_INSUFFICIENT_PERMISSIONS,permbean.getCurrentUser(),"User tried to remove GameID from another user: ",gi.getEventUser());
thrownewEJBAccessException("Not enough rights to remove another users' GameIDs");
}
...
...
@@ -727,7 +727,7 @@ public class UserBean implements UserBeanLocal {