java/code/src/com/redhat/rhn/frontend/xmlrpc/kickstart/keys/CryptoKeysHandler.java | 8 ++++++++
1 file changed, 8 insertions(+)
New commits:
commit 1dae339f2c4ef314436bddc3bf9364dbf526bacd
Author: Tomas Kasparek <tkasparek(a)redhat.com>
Date: Mon Aug 27 16:13:04 2012 +0200
733420 - Checking user permissions for CryptoKeysHandler
Added calls of ensureOrgOrConfigAdmin so CryptoKeysHandler methods are only available to org or config admins.
diff --git a/java/code/src/com/redhat/rhn/frontend/xmlrpc/kickstart/keys/CryptoKeysHandler.java b/java/code/src/com/redhat/rhn/frontend/xmlrpc/kickstart/keys/CryptoKeysHandler.java
index 7bd5b8b..426cdf2 100644
--- a/java/code/src/com/redhat/rhn/frontend/xmlrpc/kickstart/keys/CryptoKeysHandler.java
+++ b/java/code/src/com/redhat/rhn/frontend/xmlrpc/kickstart/keys/CryptoKeysHandler.java
@@ -63,6 +63,8 @@ public class CryptoKeysHandler extends BaseHandler {
throw new NoSuchUserException();
}
+ ensureOrgOrConfigAdmin(loggedInUser);
+
Org org = loggedInUser.getOrg();
KickstartLister lister = KickstartLister.getInstance();
@@ -95,6 +97,8 @@ public class CryptoKeysHandler extends BaseHandler {
throw new NoSuchUserException();
}
+ ensureOrgOrConfigAdmin(loggedInUser);
+
Org org = loggedInUser.getOrg();
CreateCryptoKeyCommand command = new CreateCryptoKeyCommand(org);
command.setType(type);
@@ -129,6 +133,8 @@ public class CryptoKeysHandler extends BaseHandler {
throw new NoSuchUserException();
}
+ ensureOrgOrConfigAdmin(loggedInUser);
+
DeleteCryptoKeyCommand command =
new DeleteCryptoKeyCommand(loggedInUser, description);
@@ -201,6 +207,8 @@ public class CryptoKeysHandler extends BaseHandler {
public CryptoKey getDetails(String sessionKey, String description) {
User loggedInUser = getLoggedInUser(sessionKey);
+ ensureOrgOrConfigAdmin(loggedInUser);
+
EditCryptoKeyCommand command = new EditCryptoKeyCommand(loggedInUser, description);
CryptoKey key = command.getCryptoKey();