Nemcio/SCM-Manager
1
0
Fork 0
mirror of https://github.com/scm-manager/scm-manager.git synced 2025-11-11 16:05:44 +01:00
Code Issues Packages Projects Releases Activity

added permission check to push command builder

Browse Source
This commit is contained in:
Sebastian Sdorra
2013-05-17 17:00:02 +02:00
parent 95c2d66bd5
commit b3becbb5bd
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
scm-core/src/main/java/sonia/scm/repository/api/PushCommandBuilder.java
View File

@@ -33,10 +33,15 @@ package sonia.scm.repository.api;
//~--- non-JDK imports -------------------------------------------------------- //~--- non-JDK imports --------------------------------------------------------
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.subject.Subject;
import sonia.scm.repository.PermissionType;
import sonia.scm.repository.Repository; import sonia.scm.repository.Repository;
import sonia.scm.repository.RepositoryException; import sonia.scm.repository.RepositoryException;
import sonia.scm.repository.spi.PushCommand; import sonia.scm.repository.spi.PushCommand;
import sonia.scm.repository.spi.PushCommandRequest; import sonia.scm.repository.spi.PushCommandRequest;
import sonia.scm.security.RepositoryPermission;
//~--- JDK imports ------------------------------------------------------------ //~--- JDK imports ------------------------------------------------------------
@@ -76,6 +81,14 @@ public final class PushCommandBuilder
public PushResponse push(Repository remoteRepository) public PushResponse push(Repository remoteRepository)
throws IOException, RepositoryException throws IOException, RepositoryException
{ {
Subject subject = SecurityUtils.getSubject();
//J-
subject.checkPermission(
new RepositoryPermission(remoteRepository, PermissionType.WRITE)
);
//J+
request.setRemoteRepository(remoteRepository); request.setRemoteRepository(remoteRepository);
return command.push(request); return command.push(request);