6f87a4df8353e1f1dc78211af1b33fdabf0ed302,xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-user/xwiki-platform-wiki-user-script/src/main/java/org/xwiki/wiki/user/script/WikiUserManagerScriptService.java,WikiUserManagerScriptService,refuseRequest,#MemberCandidacy#String#String#,352

Before Change


    public boolean refuseRequest(MemberCandidacy request, String message, String privateComment)
    {
        XWikiContext xcontext = xcontextProvider.get();
        if (!xcontext.getUser().equals(request.getUserId())) {
            return false;
        }
        try {

After Change


    {
        // Check if the current user is userId
        XWikiContext xcontext = xcontextProvider.get();
        DocumentReference userReference = documentReferenceResolver.resolve(request.getUserId());
        if (!xcontext.getUserReference().equals(userReference)) {
            return false;
        }