From 36b41e73097691a469a09bce535b33c3b04113b5 Mon Sep 17 00:00:00 2001
From: Mike Jumper <mjumper@apache.org>
Date: Tue, 26 Sep 2023 17:23:58 -0700
Subject: [PATCH] GUACAMOLE-1856: Correct CREATE_USER vs. CREATE_USER_GROUP
 check in creation of groups.

---
 .../apache/guacamole/auth/jdbc/usergroup/UserGroupService.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-base/src/main/java/org/apache/guacamole/auth/jdbc/usergroup/UserGroupService.java b/extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-base/src/main/java/org/apache/guacamole/auth/jdbc/usergroup/UserGroupService.java
index 3c42572ce..547b15997 100644
--- a/extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-base/src/main/java/org/apache/guacamole/auth/jdbc/usergroup/UserGroupService.java
+++ b/extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-base/src/main/java/org/apache/guacamole/auth/jdbc/usergroup/UserGroupService.java
@@ -121,7 +121,7 @@ public class UserGroupService extends ModeledDirectoryObjectService<ModeledUserG
 
         // Return whether user has explicit user group creation permission
         SystemPermissionSet permissionSet = user.getUser().getEffectivePermissions().getSystemPermissions();
-        return permissionSet.hasPermission(SystemPermission.Type.CREATE_USER);
+        return permissionSet.hasPermission(SystemPermission.Type.CREATE_USER_GROUP);
 
     }