edit profile bug?
hi,
i noticed that when a user changes his user name i get the following
security error:
org.acegisecurity.AccessDeniedException: Access Denied: Only administrators are
allowed to modify other users.
at
org.appfuse.service.UserSecurityAdvice.before(UserSecurityAdvice.java:63)
at
org.springframework.aop.framework.adapter.MethodBeforeAdviceInterceptor.invoke(MethodBeforeAdviceInterceptor.java:49)
at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161)
at
org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161)
at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy38.saveUser(Unknown Source)
at org.appfuse.webapp.action.UserAction.save(UserAction.java:156)
which is kind off logical because there is a check done if the current
logged in user is the one who is changing the profile. but the user name
is changed so there is no match anymore.
is this a known bug??
tibi
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
