Separated epp login and epp request abilities #2742

This commit is contained in:
Priit Tark 2015-08-19 01:21:16 +03:00
parent 598ab7ba63
commit 34f1d7d254
5 changed files with 83 additions and 61 deletions

View file

@ -56,6 +56,15 @@ class Epp::SessionsController < EppController
success = false
end
if success && @api_user.cannot?(:create, :epp_login)
epp_errors << {
msg: 'Authentication error; server closing connection (API user does not have epp role)',
code: '2501'
}
success = false
end
if success && !ip_white?
epp_errors << {
msg: 'Authentication error; server closing connection (IP is not whitelisted)',