honeymoose
/
hapi-fhir
mirror of https://github.com/hapifhir/hapi-fhir.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Don't incorrectly block transactions

This commit is contained in:
James 2016-11-11 23:52:16 -05:00
parent 2d7592f7a8
commit 8676489792
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hapi-fhir-base/src/main/java/ca/uhn/fhir/rest/server/interceptor/auth/RuleImplOp.java
View File

@ -111,6 +111,9 @@ class RuleImplOp extends BaseRule implements IAuthRule {
break;
case BATCH:
case TRANSACTION:
if (!(theOperation == RestOperationTypeEnum.TRANSACTION)) {
return null;
}
if (theInputResource != null && requestAppliesToTransaction(ctx, myOp, theInputResource)) {
if (getMode() == PolicyEnum.DENY) {
return new Verdict(PolicyEnum.DENY, this);

6
src/changes/changes.xml
View File

@ -6,6 +6,12 @@
<title>HAPI FHIR Changelog</title>
</properties>
<body>
<release version="2.2" date="TBD">
<action type="fix">
Fix issue in AuthorizationIntetceptor where
transactions are blocked even when they
should not be
</action>
<release version="2.1" date="2016-11-11">
<action type="add">
STU3 structure definitions have been updated to the