From 542947eaa0ec8c47aaf82af47ae9914ebe0dead5 Mon Sep 17 00:00:00 2001 From: Michael Jumper Date: Wed, 14 Aug 2013 22:59:57 -0700 Subject: [PATCH] System permission names should be compared with equals(), not startsWith(). --- .../sourceforge/guacamole/net/basic/crud/users/Update.java | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/guacamole/src/main/java/net/sourceforge/guacamole/net/basic/crud/users/Update.java b/guacamole/src/main/java/net/sourceforge/guacamole/net/basic/crud/users/Update.java index ac9b1cba4..955b3fd64 100644 --- a/guacamole/src/main/java/net/sourceforge/guacamole/net/basic/crud/users/Update.java +++ b/guacamole/src/main/java/net/sourceforge/guacamole/net/basic/crud/users/Update.java @@ -85,15 +85,15 @@ public class Update extends AuthenticatingHttpServlet { throws GuacamoleException { // Create user - if (str.startsWith(CREATE_USER_PERMISSION)) + if (str.equals(CREATE_USER_PERMISSION)) return new SystemPermission(SystemPermission.Type.CREATE_USER); // Create connection - if (str.startsWith(CREATE_CONNECTION_PERMISSION)) + if (str.equals(CREATE_CONNECTION_PERMISSION)) return new SystemPermission(SystemPermission.Type.CREATE_CONNECTION); // Administration - if (str.startsWith(ADMIN_PERMISSION)) + if (str.equals(ADMIN_PERMISSION)) return new SystemPermission(SystemPermission.Type.ADMINISTER); throw new GuacamoleException("Invalid permission string.");