mirror of
https://github.com/scm-manager/scm-manager.git
synced 2026-04-01 18:00:12 +02:00
fix bugs in authentication system
This commit is contained in:
@@ -235,7 +235,12 @@ public class XmlUserManager extends AbstractUserManager
|
||||
@Override
|
||||
public void modify(User user) throws UserException, IOException
|
||||
{
|
||||
SecurityUtil.assertIsAdmin(scurityContextProvider);
|
||||
User currentUser = SecurityUtil.getCurrentUser(scurityContextProvider);
|
||||
|
||||
if (!user.equals(currentUser) &&!currentUser.isAdmin())
|
||||
{
|
||||
throw new ScmSecurityException("admin account is required");
|
||||
}
|
||||
|
||||
String name = user.getName();
|
||||
|
||||
|
||||
Reference in New Issue
Block a user