From 4e015d5a446b565b8e43ec852c4dd58f77889c87 Mon Sep 17 00:00:00 2001 From: Luca Frosini Date: Thu, 26 Jan 2023 10:30:22 +0100 Subject: [PATCH] Any user can remove self from cache --- .../java/org/gcube/gcat/rest/administration/User.java | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/src/main/java/org/gcube/gcat/rest/administration/User.java b/src/main/java/org/gcube/gcat/rest/administration/User.java index 8167e6f..2d623b6 100644 --- a/src/main/java/org/gcube/gcat/rest/administration/User.java +++ b/src/main/java/org/gcube/gcat/rest/administration/User.java @@ -143,11 +143,12 @@ public class User extends REST implements org.gcube.gcat.api.interface public Response removeCallerFromCache() { SecretManager secretManager = SecretManagerProvider.instance.get(); org.gcube.common.authorization.utils.user.User user = secretManager.getUser(); - if(user.getRoles().contains(Role.MANAGER.getPortalRole())) { - CKANUserCache.removeUserFromCache(); - }else { - throw new ForbiddenException("Only " + Role.MANAGER.getPortalRole() + "s are authorized to remove an user from the cache"); - } +// if(user.getRoles().contains(Role.MANAGER.getPortalRole())) { + // Any user can remove self from cache + CKANUserCache.removeUserFromCache(); +// }else { +// throw new ForbiddenException("Only " + Role.MANAGER.getPortalRole() + "s are authorized to remove an user from the cache"); +// } return Response.status(Status.NO_CONTENT).build(); }