fix portal auth

2016-01-29 11:36:17 +02:00
parent 63eeea7b26
commit eafb8bd2cb
1 changed files with 4 additions and 0 deletions
@@ -158,6 +158,10 @@ class Auth
            }

            if ($this->isPortal()) {
+                if (!$user->isAdmin() && !$this->getEntityManager()->getRepository('Portal')->isRelated($this->getPortal(), 'users', $user)) {
+                    $GLOBALS['log']->debug("AUTH: Trying to login to portal as user '".$user->get('userName')."' which is portal user but does not belongs to portal.");
+                    return false;
+                }
                $user->set('portalId', $this->getPortal()->id);
            }