FCLT#54494 Beveiliging klantscripts iets generieker maken

svn path=/Database/trunk/; revision=40617
This commit is contained in:
Erik Groener
2019-01-22 08:27:28 +00:00
parent de8060fc08
commit 04ec6276ff

View File

@@ -131,20 +131,28 @@ AS
IS
klant VARCHAR2(4);
groep VARCHAR2(4);
fout NUMBER(1) := 0;
qry VARCHAR2(4000);
tekst VARCHAR2 (255);
BEGIN
tekst := '';
qry := 'SELECT fac_version_cust'
|| ' , fac_version_group'
|| ' FROM fac_version';
EXECUTE IMMEDIATE qry INTO klant, groep;
BEGIN
qry := 'SELECT fac_version_cust'
|| ' , fac_version_group'
|| ' FROM fac_version';
EXECUTE IMMEDIATE qry INTO klant, groep;
EXCEPTION
WHEN OTHERS THEN
klant := USER;
groep := USER;
fout := 1;
END;
IF NOT (custpattern = klant OR custpattern = groep OR REGEXP_LIKE(USER, custpattern, 'i'))
THEN
tekst := CHR(10)
|| '============================================' || CHR(10)
|| 'Wrong user!!!!!!!!!' || CHR(10)
|| 'User should be '|| klant ||' or match ' || custpattern || ' but is ' || USER || CHR(10)
|| 'User should be '|| CASE WHEN fout = 0 THEN klant ||' or ' END || 'match ' || custpattern || ' but is ' || USER || CHR(10)
|| '============================================' || CHR(10);
RAISE_APPLICATION_ERROR(-20000, tekst);
END IF;