Deal with null context for system roles

diff --git a/org.argeo.cms/src/org/argeo/cms/auth/SystemRole.java b/org.argeo.cms/src/org/argeo/cms/auth/SystemRole.java
index 933f80a95bc154a282fa5dfb0a37e831420296b2..3a28b7c8878a4fce9e04fd9108d2de76050fba2a 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/auth/SystemRole.java
+++ b/org.argeo.cms/src/org/argeo/cms/auth/SystemRole.java
@@ -16,6 +16,9 @@ public interface SystemRole {
                for (ImpliedByPrincipal role : roles) {
                        if (role.isSystemRole()) {
                                if (role.getRoleName().equals(getName())) {
+                                       // !! if context is not specified, it is considered irrelevant
+                                       if (context == null)
+                                               return true;
                                        if (role.getContext().equalsIgnoreCase(context)
                                                        || role.getContext().equals(CmsConstants.NODE_BASEDN))
                                                return true;