Revision 81:7ad456a5ef50

View differences:

src/main/java/my/com/upass/MinimalUPassControllerV2.java
774 774
					throw new UPassException(MinimalConstants.ERR_INVALID_INPUT);
775 775

  
776 776
			} else {
777
				if (checkResult.invokerAppId == null)
777
				final Integer invokerAppId = checkResult.invokerAppId;
778
				if (invokerAppId == null)
778 779
					throw new UPassException(MinimalConstants.ERR_APP_SERV_NOT_PERMITTED);
779 780

  
780 781
				if (targetAppId == null) {
781
					targetAppId = checkResult.invokerAppId;
782
					targetAppId = invokerAppId;
782 783

  
783
				} else if (!targetAppId.equals(checkResult.invokerAppId)) {
784
					throw new UPassException(MinimalConstants.ERR_APP_SERV_NOT_PERMITTED);
784
				} else if (!invokerAppId.equals(targetAppId)) {
785

  
786
					if (!invokerAppId.equals(ClientApp.APP_ID_CCPP)
787
							|| !invokerAppId.equals(ClientApp.APP_ID_ONLINE_TICKETING))
788

  
789
						throw new UPassException(MinimalConstants.ERR_APP_SERV_NOT_PERMITTED);
785 790
				}
786 791
			}
787 792
			return findProfile_noAccessCheck(username, targetAppId, txSession);

Also available in: Unified diff