in app/controllers/PanDomainAuthActions.scala [15:32]
private def noPermissionMessage(authedUser: AuthenticatedUser): String =
s"user ${authedUser.user.email} does not have ${Permissions.basicAccess.name} permission"
override def validateUser(authedUser: AuthenticatedUser): Boolean = {
val isValid =
(authedUser.user.emailDomain == "guardian.co.uk") &&
(authedUser.multiFactor)
val hasBasicAccess = permissionsProvider.hasPermission(Permissions.basicAccess, authedUser.user)
if (!isValid) {
log.warn(s"User ${authedUser.user.email} is not valid")
} else if (!hasBasicAccess) {
log.warn(noPermissionMessage(authedUser))
}
isValid && hasBasicAccess
}