From 5c473792ef5840f5be68054d294597cc60cd048f Mon Sep 17 00:00:00 2001
From: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
Date: Wed, 10 Jul 2019 08:21:05 +0200
Subject: [PATCH] add PermissionCheck for Plugins

---
 .../main/java/sonia/scm/api/v2/resources/PluginResource.java | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/scm-webapp/src/main/java/sonia/scm/api/v2/resources/PluginResource.java b/scm-webapp/src/main/java/sonia/scm/api/v2/resources/PluginResource.java
index fc49a51513..6da204ea6c 100644
--- a/scm-webapp/src/main/java/sonia/scm/api/v2/resources/PluginResource.java
+++ b/scm-webapp/src/main/java/sonia/scm/api/v2/resources/PluginResource.java
@@ -4,6 +4,7 @@ import com.webcohesion.enunciate.metadata.rs.ResponseCode;
 import com.webcohesion.enunciate.metadata.rs.StatusCodes;
 import com.webcohesion.enunciate.metadata.rs.TypeHint;
 import sonia.scm.plugin.PluginLoader;
+import sonia.scm.plugin.PluginPermissions;
 import sonia.scm.plugin.PluginWrapper;
 import sonia.scm.web.VndMediaType;
 
@@ -47,7 +48,7 @@ public class PluginResource {
     List<PluginWrapper> plugins = pluginLoader.getInstalledPlugins()
       .stream()
       .collect(Collectors.toList());
-
+    PluginPermissions.read().check();
     return Response.ok(collectionMapper.map(plugins)).build();
   }
 
@@ -73,7 +74,7 @@ public class PluginResource {
       .filter(plugin -> id.equals(plugin.getId()))
       .map(mapper::map)
       .findFirst();
-
+    PluginPermissions.read().check();
     if (pluginDto.isPresent()) {
       return Response.ok(pluginDto.get()).build();
     } else {