|
@@ -420,9 +420,9 @@ public class ExamController extends BaseSearchController {
|
|
public ExamVO deleteExamById(@PathVariable("examId") Long examId){
|
|
public ExamVO deleteExamById(@PathVariable("examId") Long examId){
|
|
Long userId = (Long) SecurityUtils.getSubject().getSession().getAttribute("userId");
|
|
Long userId = (Long) SecurityUtils.getSubject().getSession().getAttribute("userId");
|
|
String permissionStr = userId + ":task:delete:" + examId;
|
|
String permissionStr = userId + ":task:delete:" + examId;
|
|
- boolean havaPermissionToDelete = SecurityUtils.getSubject().isPermitted(new ExamPermission(permissionStr));
|
|
|
|
|
|
+ boolean havePermissionToDelete = SecurityUtils.getSubject().isPermitted(new ExamPermission(permissionStr));
|
|
boolean isAdmin = SecurityUtils.getSubject().hasRole("admin");
|
|
boolean isAdmin = SecurityUtils.getSubject().hasRole("admin");
|
|
- if (havaPermissionToDelete || isAdmin) {
|
|
|
|
|
|
+ if (havePermissionToDelete || isAdmin) {
|
|
return examLogic.deleteExamById(examId);
|
|
return examLogic.deleteExamById(examId);
|
|
}else {
|
|
}else {
|
|
throw new UnauthenticatedException("Operation forbidden!");
|
|
throw new UnauthenticatedException("Operation forbidden!");
|