From 6f2918cc2a4f67b692f91e4e5a40c122a75ed402 Mon Sep 17 00:00:00 2001
From: "Christopher Lott (cl778h)" <clott@research.att.com>
Date: Fri, 27 Oct 2017 20:25:51 -0400
Subject: Enhance authentication to fix a vulnerability

Issue: PORTAL-137
Change-Id: I7e2a5544653ac2067da7231d878009b260dc740f
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
---
 .../src/main/webapp/WEB-INF/fusion/orm/EP.hbm.xml     | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

(limited to 'ecomp-portal-BE-common/src/main/webapp')

diff --git a/ecomp-portal-BE-common/src/main/webapp/WEB-INF/fusion/orm/EP.hbm.xml b/ecomp-portal-BE-common/src/main/webapp/WEB-INF/fusion/orm/EP.hbm.xml
index 8fa11e01..8fe369fa 100644
--- a/ecomp-portal-BE-common/src/main/webapp/WEB-INF/fusion/orm/EP.hbm.xml
+++ b/ecomp-portal-BE-common/src/main/webapp/WEB-INF/fusion/orm/EP.hbm.xml
@@ -1961,4 +1961,23 @@ where fn_role.app_id = fn_app.app_id and fn_app.enabled='Y' and fn_role.active_y
             ;
 		]]>
 	</sql-query>
+	
+    <query name="getEPUserByOrgUserId">
+	<![CDATA[
+		FROM EPUser WHERE orgUserId = :org_user_id
+	]]>
+    </query>
+
+	<query name="getEPUserByLoginId">
+	<![CDATA[
+		FROM EPUser WHERE loginId = :login_id
+	]]>
+    </query>
+
+    <query name="getEPUserByLoginIdLoginPwd">
+	<![CDATA[
+		FROM EPUser WHERE loginId = :login_id and loginPwd = :login_pwd		
+	]]>
+    </query>
+
 </hibernate-mapping>
-- 
cgit 1.2.3-korg