fix bugs in authentication system

This commit is contained in:
Sebastian Sdorra
2010-12-04 16:18:47 +01:00
parent 8e49f50ced
commit 9fea1844d6
3 changed files with 17 additions and 3 deletions

View File

@@ -235,7 +235,12 @@ public class XmlUserManager extends AbstractUserManager
@Override
public void modify(User user) throws UserException, IOException
{
SecurityUtil.assertIsAdmin(scurityContextProvider);
User currentUser = SecurityUtil.getCurrentUser(scurityContextProvider);
if (!user.equals(currentUser) &&!currentUser.isAdmin())
{
throw new ScmSecurityException("admin account is required");
}
String name = user.getName();