Update server/impl/src/main/java/com/walmartlabs/concord/server/user/…

…UserResourceV2.java Co-authored-by: Ivan Bodrov <[email protected]>
walmartlabs · Nov 14, 2024 · e23952d · e23952d
1 parent f42937f
commit e23952d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/impl/src/main/java/com/walmartlabs/concord/server/user/UserResourceV2.java b/server/impl/src/main/java/com/walmartlabs/concord/server/user/UserResourceV2.java
@@ -91,8 +91,8 @@ public UserEntry get(@PathParam("id") UUID id) {
 
         UUID authenticatedId = loggedIn.getId();
 
-        if(!authenticatedId.equals(id)) {
-            assertAdmin();
+        if(!authenticatedId.equals(id) && !Roles.isAdmin()) {
+            throw new UnauthorizedException("Users can only view their own information or must have admin privileges.");
         }
 
         return userDao.get(id);