Ticket #269: Only a system administrator can add system permissions.

This commit is contained in:
James Muehlner
2013-03-03 21:58:41 -08:00
parent 00a699ade0
commit 3b7618a030

View File

@@ -495,12 +495,16 @@ public class UserDirectory implements Directory<String, net.sourceforge.guacamol
* have when this operation completes. * have when this operation completes.
*/ */
private void createSystemPermissions(int user_id, private void createSystemPermissions(int user_id,
Collection<SystemPermission> permissions) { Collection<SystemPermission> permissions) throws GuacamoleException {
// If no permissions given, stop now // If no permissions given, stop now
if(permissions.isEmpty()) if(permissions.isEmpty())
return; return;
// Only a system administrator can add system permissions.
permissionCheckService.verifySystemAccess(
this.user_id, SystemPermission.Type.ADMINISTER.name());
// Insert all requested permissions // Insert all requested permissions
for (SystemPermission permission : permissions) { for (SystemPermission permission : permissions) {