From 37f35811926bd8180449a15265e6fb10c4109385 Mon Sep 17 00:00:00 2001
From: vsmk98 <vsaimk@gmail.com>
Date: Mon, 6 May 2019 18:37:35 +0800
Subject: [PATCH] permissions: validation to check account status for accounts
 linked to admin roles

---
 core/types/permissions_cache.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/types/permissions_cache.go b/core/types/permissions_cache.go
index 2f12f9664..9e0d0d0bf 100644
--- a/core/types/permissions_cache.go
+++ b/core/types/permissions_cache.go
@@ -374,7 +374,7 @@ func (o *RoleCache) GetRoleList() []RoleInfo {
 // default access
 func GetAcctAccess(acctId common.Address) AccessType {
 	if a := AcctInfoMap.GetAccount(acctId); a != nil && a.Status == AcctActive {
-		if a.RoleId == networkAdminRole || a.RoleId == orgAdminRole {
+		if (a.RoleId == networkAdminRole || a.RoleId == orgAdminRole) && a.Status == AcctActive {
 			return FullAccess
 		}
 		if o := OrgInfoMap.GetOrg(a.OrgId); o != nil && o.Status == OrgApproved {