Commit 32c3e27a by chenith

Allow only verified users in to admin portal.

parent f6c97098
...@@ -7,6 +7,7 @@ import oneit.security.SecUser; ...@@ -7,6 +7,7 @@ import oneit.security.SecUser;
import oneit.servlets.forms.SubmissionDetails; import oneit.servlets.forms.SubmissionDetails;
import oneit.utils.MultiException; import oneit.utils.MultiException;
import oneit.utils.parsers.FieldException; import oneit.utils.parsers.FieldException;
import performa.orm.CompanyUser;
import performa.utils.Utils; import performa.utils.Utils;
/** /**
...@@ -19,8 +20,10 @@ public class UserLoginFP extends LoginProcessor ...@@ -19,8 +20,10 @@ public class UserLoginFP extends LoginProcessor
protected void checkUserCanLogin(ObjectTransaction trans, SecUser userToCheck, SubmissionDetails submission, Map requestParams) throws FieldException, MultiException protected void checkUserCanLogin(ObjectTransaction trans, SecUser userToCheck, SubmissionDetails submission, Map requestParams) throws FieldException, MultiException
{ {
super.checkUserCanLogin(trans, userToCheck, submission, requestParams); super.checkUserCanLogin(trans, userToCheck, submission, requestParams);
CompanyUser companyUser = userToCheck.getExtension(CompanyUser.REFERENCE_CompanyUser);
if(!Utils.checkAdminPortalAccess(userToCheck)) if(!Utils.checkAdminPortalAccess(userToCheck) || companyUser == null || companyUser.getIsAccountVerified()!=Boolean.TRUE)
{ {
throw new FieldException("You're not an authorised user to access this portal.", SecUser.FIELD_UserName); throw new FieldException("You're not an authorised user to access this portal.", SecUser.FIELD_UserName);
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment