Infrastructure

mn/isAuthorized/somePID?action=booBoo should throw InvalidRequest, but throws NotAuthorized like the following:

null not allowed on somePID

metacat/restservice/MNResourceHandler.isAuthorized(..) relies on types.v1.Permission.convert(String) to throw exception, but Permission.convert behavior is "garbage in = null out"

public enum Permission ... {

public static Permission convert(String value) {
for (Permission inst : values()) {
if (inst.xmlValue().equals(value)) {
return inst;
}
}
return null;
}
}

Lastly, metacat/dataone/D1NodeService.isAuthorized() does not check for bogus permissions.