Add permission check

This commit is contained in:
René Pfeuffer
2020-10-01 12:06:14 +02:00
parent bd247a4332
commit 25a87296a7
3 changed files with 15 additions and 6 deletions

View File

@@ -33,6 +33,7 @@ import org.apache.shiro.util.ThreadContext;
import sonia.scm.ContextEntry;
import sonia.scm.store.DataStore;
import sonia.scm.store.DataStoreFactory;
import sonia.scm.user.UserPermissions;
import javax.inject.Inject;
import java.security.SecureRandom;
@@ -74,6 +75,7 @@ public class ApiKeyService {
public CreationResult createNewKey(String name, String permissionRole) {
String user = currentUser();
UserPermissions.changeApiKeys(user).check();
String passphrase = passphraseGenerator.get();
String hashedPassphrase = passwordService.encryptPassword(passphrase);
final String id = keyGenerator.createKey();
@@ -96,6 +98,7 @@ public class ApiKeyService {
public void remove(String id) {
String user = currentUser();
UserPermissions.changeApiKeys(user).check();
Lock lock = locks.get(user).writeLock();
lock.lock();
try {