MID-2884 fix for "disabled" - not authorized user

Evolveum · Apr 28, 2016 · 373ec40 · 373ec40
1 parent a83d5b3
commit 373ec40
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.../src/main/java/com/evolveum/midpoint/model/impl/security/AuthenticationEvaluatorImpl.java b/.../src/main/java/com/evolveum/midpoint/model/impl/security/AuthenticationEvaluatorImpl.java
@@ -30,6 +30,7 @@
 import org.springframework.security.authentication.DisabledException;
 import org.springframework.security.authentication.LockedException;
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.AuthenticationException;
 import org.springframework.security.core.userdetails.UsernameNotFoundException;
 import org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken;
 import org.springframework.stereotype.Component;
@@ -118,7 +119,7 @@ public UsernamePasswordAuthenticationToken authenticateUserPassword(ConnectionEn
 		// Authorizations
 		if (!hasAnyAuthorization(principal)) {
 			recordAuthenticationFailure(principal, connEnv, "no authorizations");
-			throw new AccessDeniedException("web.security.provider.access.denied");
+			throw new DisabledException("web.security.provider.access.denied");
 		}
 
 		// Password age