Merge pull request #13332 from sgayangi/sgayangi-webhook-transport-headerds

Add null check for user roles

Author: RakhithaRR

components/apimgt/org.wso2.carbon.apimgt.impl/src/main/java/org/wso2/carbon/apimgt/impl/utils/APIUtil.java

@@ -7732,13 +7732,15 @@ private static String getActualEpPswdFromHiddenProperty(API api, Registry regist
     public static boolean compareRoleList(String[] userRoleList, String accessControlRole) {
         if (userRoleList != null) {
             for (String userRole : userRoleList) {
-                if (Boolean.parseBoolean(caseSensitiveCheckEnabled)) {
-                    if (userRole.equals(accessControlRole)) {
-                        return true;
-                    }
-                } else {
-                    if (userRole.equalsIgnoreCase(accessControlRole)) {
-                        return true;
+                if (userRole != null) {
+                    if (Boolean.parseBoolean(caseSensitiveCheckEnabled)) {
+                        if (userRole.equals(accessControlRole)) {
+                            return true;
+                        }
+                    } else {
+                        if (userRole.equalsIgnoreCase(accessControlRole)) {
+                            return true;
+                        }
                     }
                 }
             }