Description
When authorizing actions, check for NO_ACCESS permission first instead of FULL_ACCESS (ClientState.hasAccess). This seems like a safer order to me.
When authorizing actions, check for NO_ACCESS permission first instead of FULL_ACCESS (ClientState.hasAccess). This seems like a safer order to me.