From: <rv...@us...> - 2010-01-13 17:57:45
|
Revision: 428 http://treebase.svn.sourceforge.net/treebase/?rev=428&view=rev Author: rvos Date: 2010-01-13 17:57:38 +0000 (Wed, 13 Jan 2010) Log Message: ----------- SearchSummaryController now uses super.getConditionalModelAndView to construct the view it returns. This way, an additional access check is performed, so that studies-in-progress are only viewable given an x-access-granted parameter, otherwise an access violation view is returned. Modified Paths: -------------- trunk/treebase-web/src/main/java/org/cipres/treebase/web/controllers/SearchSummaryController.java Modified: trunk/treebase-web/src/main/java/org/cipres/treebase/web/controllers/SearchSummaryController.java =================================================================== --- trunk/treebase-web/src/main/java/org/cipres/treebase/web/controllers/SearchSummaryController.java 2010-01-13 17:31:31 UTC (rev 427) +++ trunk/treebase-web/src/main/java/org/cipres/treebase/web/controllers/SearchSummaryController.java 2010-01-13 17:57:38 UTC (rev 428) @@ -256,9 +256,8 @@ protected ModelAndView processFormSubmission(HttpServletRequest request, HttpServletResponse response, Object command, BindException bindException) throws Exception { - // TODO Auto-generated method stub LOGGER.debug("processFormSubmission found study " + (Study) command); - return showForm(request, response, bindException); + return getConditionalModelAndView(request, showForm(request, response, bindException)); } @Override @@ -401,7 +400,7 @@ // but what the heck, let's put it in just to be sure newModel.put("study", theStudy); - return new ModelAndView(pageName, newModel); + return getConditionalModelAndView(request, new ModelAndView(pageName, newModel)); } This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |