From 8a45ae67ed7371a9d28cbba6de188af3270562b6 Mon Sep 17 00:00:00 2001
From: rsanchez <rsanchez@curisit.net>
Date: Mon, 17 Apr 2017 17:11:04 +0000
Subject: [PATCH] #3529 feature - Securized access for readonly users

---
 securis/src/main/java/net/curisit/securis/services/OrganizationResource.java |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)

diff --git a/securis/src/main/java/net/curisit/securis/services/OrganizationResource.java b/securis/src/main/java/net/curisit/securis/services/OrganizationResource.java
index 2a53496..346c726 100644
--- a/securis/src/main/java/net/curisit/securis/services/OrganizationResource.java
+++ b/securis/src/main/java/net/curisit/securis/services/OrganizationResource.java
@@ -77,7 +77,12 @@
 			LOG.info("GEtting all orgs for user: " + bsc.getUserPrincipal());
 			q = em.createNamedQuery("list-organizations", Organization.class);
 		} else {
-			q = em.createNamedQuery("list-organizations", Organization.class);
+			if (bsc.getOrganizationsIds() == null || bsc.getOrganizationsIds().isEmpty()) {
+				return Response.ok().build();
+			} else {
+				q = em.createNamedQuery("list-organizations-by-ids", Organization.class);
+				q.setParameter("list_ids", bsc.getOrganizationsIds());
+			}
 		}
 
 		List<Organization> list = q.getResultList();

--
Gitblit v1.3.2