wip

caosdb-webui @ e6fef9f3

-Subproject commit d5f9090eca25a92fc44dbeeba305768e8d9f4bcb
+Subproject commit e6fef9f35da49dfea5b11f99b872d15c35fd043d

src/main/java/org/caosdb/server/database/backend/transaction/RetrieveFullEntityTransaction.java

@@ -236,15 +236,18 @@ public class RetrieveFullEntityTransaction extends BackendTransaction {
 
     if (this.subject != null) {
       System.out.println(((Principal) this.subject.getPrincipal()).getUsername());
+
+      // final EntityInterface e =
+      // execute(new RetrieveSparseEntity(q.getKey(), null), query.getAccess()).getEntity();
       // check whether the referenced entity may be retrieved
+      // recursion! (Only for the matching selections)
+      retrieveFullEntity(ref, getSubSelects(selections, propertyName));
       final EntityACL entityACL = ref.getEntityACL();
       if (!entityACL.isPermitted(this.subject, EntityPermission.RETRIEVE_ENTITY)) {
         return;
       }
+      value.setEntity(ref, true);
     }
-    // recursion! (Only for the matching selections)
-    retrieveFullEntity(ref, getSubSelects(selections, propertyName));
-    value.setEntity(ref, true);
   }
 
   /**