Index: lams_tool_forum/src/java/org/lamsfoundation/lams/tool/forum/web/actions/AuthoringAction.java =================================================================== RCS file: /usr/local/cvsroot/lams_tool_forum/src/java/org/lamsfoundation/lams/tool/forum/web/actions/AuthoringAction.java,v diff -u -r1.83 -r1.84 --- lams_tool_forum/src/java/org/lamsfoundation/lams/tool/forum/web/actions/AuthoringAction.java 17 Dec 2014 00:12:30 -0000 1.83 +++ lams_tool_forum/src/java/org/lamsfoundation/lams/tool/forum/web/actions/AuthoringAction.java 16 Apr 2015 14:01:54 -0000 1.84 @@ -595,17 +595,6 @@ List rList = new ArrayList(topics); MessageDTO topic = rList.get(topicIdx); if (topic != null) { - // check whehter the edit topic and the current user are same person, if not, forbidden to edit topic - if (topic.getMessage() != null && topic.getMessage().getCreatedBy() != null) { - // get login user (author) - HttpSession ss = SessionManager.getSession(); - // get back login user DTO - UserDTO user = (UserDTO) ss.getAttribute(AttributeNames.USER); - Long topicAuthorId = topic.getMessage().getCreatedBy().getUserId(); - if (!new Long(user.getUserID().intValue()).equals(topicAuthorId)) { - return mapping.findForward("forbiden"); - } - } // update message to HTML Form to echo back to web page: for subject, body display msgForm.setMessage(topic.getMessage()); }