From b59345258b55c2ccded2ed86d0ed3dfcf9bbc51f Mon Sep 17 00:00:00 2001 From: Sebastian Sdorra Date: Sat, 27 Nov 2010 20:09:03 +0100 Subject: [PATCH] fix security issue --- .../sonia/scm/repository/xml/XmlRepositoryManager.java | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/scm-core/src/main/java/sonia/scm/repository/xml/XmlRepositoryManager.java b/scm-core/src/main/java/sonia/scm/repository/xml/XmlRepositoryManager.java index 2669f7651e..90610773a4 100644 --- a/scm-core/src/main/java/sonia/scm/repository/xml/XmlRepositoryManager.java +++ b/scm-core/src/main/java/sonia/scm/repository/xml/XmlRepositoryManager.java @@ -257,11 +257,14 @@ public class XmlRepositoryManager extends AbstractRepositoryManager repository.getType()); } - assertIsOwner(repository); AssertUtil.assertIsValid(repository); - if (repositoryDB.contains(repository)) + Repository notModifiedRepository = repositoryDB.get(repository.getType(), + repository.getName()); + + if (notModifiedRepository != null) { + assertIsOwner(notModifiedRepository); getHandler(repository).modify(repository); repository.setLastModified(System.currentTimeMillis());