Commit 32c3e27a by chenith

Allow only verified users in to admin portal.

parent f6c97098
......@@ -7,6 +7,7 @@ import oneit.security.SecUser;
import oneit.servlets.forms.SubmissionDetails;
import oneit.utils.MultiException;
import oneit.utils.parsers.FieldException;
import performa.orm.CompanyUser;
import performa.utils.Utils;
/**
......@@ -20,7 +21,9 @@ public class UserLoginFP extends LoginProcessor
{
super.checkUserCanLogin(trans, userToCheck, submission, requestParams);
if(!Utils.checkAdminPortalAccess(userToCheck))
CompanyUser companyUser = userToCheck.getExtension(CompanyUser.REFERENCE_CompanyUser);
if(!Utils.checkAdminPortalAccess(userToCheck) || companyUser == null || companyUser.getIsAccountVerified()!=Boolean.TRUE)
{
throw new FieldException("You're not an authorised user to access this portal.", SecUser.FIELD_UserName);
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment