dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove duplication of isAuthorizedForEmployee

Browse Source 
git-svn-id: http://webgoat.googlecode.com/svn/trunk@149 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
rogan.dawes 2007-07-10 11:55:10 +00:00
parent a8119f6982
commit 0bdc36b2f6
1 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/DefaultLessonAction.java
View File

@ -259,11 +259,7 @@ public abstract class DefaultLessonAction implements LessonAction
/* User is validated for function, but can the user perform that function on the specified user? */
if(authorized)
{
query = "SELECT * FROM ownership WHERE employer_id = " + Integer.parseInt(employer_id) +
" AND employee_id = " + employeeId;
answer_statement = WebSession.getConnection(s).createStatement( ResultSet.TYPE_SCROLL_INSENSITIVE, ResultSet.CONCUR_READ_ONLY );
answer_results = answer_statement.executeQuery( query );
authorized = answer_results.first();
authorized = isAuthorizedForEmployee(s, Integer.parseInt(employer_id), employeeId);
}
}
catch ( SQLException sqle )