Ticket #371: If the user is not found, throw a security excpetion.

guacamole/src/main/java/net/sourceforge/guacamole/net/basic/crud/permissions/List.java

@@ -116,13 +116,13 @@ public class List extends AuthenticatingHttpServlet {
 
                 // Get specific user
                 user = users.get(username);
-                if (user == null)
-                    throw new GuacamoleSecurityException("No such user.");
-
             }
             else
                 user = context.self();
             
+            if (user == null)
+                throw new GuacamoleSecurityException("No such user.");
+
             // Write XML content type
             response.setHeader("Content-Type", "text/xml");