add check by event short name

alfio-event · May 12, 2023 · 5ef3404 · 5ef3404
1 parent fbbaed5
commit 5ef3404
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/src/main/java/alfio/manager/AccessService.java b/src/main/java/alfio/manager/AccessService.java
@@ -87,7 +87,12 @@ public void checkOrganizationAccess(Principal principal, int organizationId) {
 
     public void checkEventAccess(Principal principal, int eventId) {
         var orgId = eventRepository.findOrganizationIdByEventId(eventId);
-        checkOrganizationAccess(principal, eventId);
+        checkOrganizationAccess(principal, orgId);
+    }
+
+    public void checkEventAccess(Principal principal, String eventShortName) {
+        var orgId = eventRepository.findOrganizationIdByShortName(eventShortName);
+        checkOrganizationAccess(principal, orgId);
     }
 
     private static boolean isSystemApiUser(Principal principal) {

diff --git a/src/main/java/alfio/repository/EventRepository.java b/src/main/java/alfio/repository/EventRepository.java
@@ -54,6 +54,10 @@ public interface EventRepository {
     @Query("select org_id from event where id = :eventId")
     int findOrganizationIdByEventId(@Bind("eventId") int eventId);
 
+
+    @Query("select org_id from event where short_name = :shortName")
+    int findOrganizationIdByShortName(@Bind("shortName") String eventShortName);
+
     default ZoneId getZoneIdByEventId(int eventId) {
         return TimeZone.getTimeZone(getTimeZoneByEventId(eventId)).toZoneId();
     }