Return empty user object when authorized user not found

This commit is contained in:
Karl Erik Õunapuu 2020-09-18 10:52:14 +03:00
parent 03182f9222
commit 036a3a3720
No known key found for this signature in database
GPG key ID: C9DD647298A34764

View file

@ -158,12 +158,15 @@ class Registrar
def find_user_by_idc_and_allowed(idc)
return User.new unless idc
possible_users = ApiUser.where(identity_code: idc) || User.new
possible_users.each do |selected_user|
if selected_user.registrar.white_ips.registrar_area.include_ip?(request.ip)
return selected_user
end
next unless selected_user.registrar.white_ips.registrar_area.include_ip?(request.ip)
return selected_user
end
User.new
end
def check_ip_restriction