diff options
author | cfu <cfu@c9f7a03b-bd48-0410-a16d-cbbf54688b0b> | 2010-08-12 18:09:37 +0000 |
---|---|---|
committer | cfu <cfu@c9f7a03b-bd48-0410-a16d-cbbf54688b0b> | 2010-08-12 18:09:37 +0000 |
commit | de09fe4684218ea4e1f2f7c33fddb817fa34bdc6 (patch) | |
tree | a5ef40b10ecc31d99ef9fa1beae019bbe492ee45 | |
parent | eb60513c6e8c9fb74d016773acdae709140f7508 (diff) | |
download | pki-de09fe4684218ea4e1f2f7c33fddb817fa34bdc6.tar.gz pki-de09fe4684218ea4e1f2f7c33fddb817fa34bdc6.tar.xz pki-de09fe4684218ea4e1f2f7c33fddb817fa34bdc6.zip |
Bug 583822 - CC: ACL issues from CA interface CC doc review
git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1173 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
3 files changed, 12 insertions, 1 deletions
diff --git a/pki/base/ca/shared/webapps/ca/WEB-INF/web.xml b/pki/base/ca/shared/webapps/ca/WEB-INF/web.xml index 58d56f7e2..e48c1c915 100644 --- a/pki/base/ca/shared/webapps/ca/WEB-INF/web.xml +++ b/pki/base/ca/shared/webapps/ca/WEB-INF/web.xml @@ -1930,7 +1930,7 @@ <init-param><param-name> ID </param-name> <param-value> caGetSubsystemCert </param-value> </init-param> <init-param><param-name> resourceID </param-name> - <param-value> certServer.ee.cert </param-value> </init-param> + <param-value> certServer.ee.certificate </param-value> </init-param> <init-param><param-name> interface </param-name> <param-value> ee </param-value> </init-param> </servlet> diff --git a/pki/base/common/src/com/netscape/cms/servlet/admin/JobsAdminServlet.java b/pki/base/common/src/com/netscape/cms/servlet/admin/JobsAdminServlet.java index 8a02edce9..65bc226ca 100644 --- a/pki/base/common/src/com/netscape/cms/servlet/admin/JobsAdminServlet.java +++ b/pki/base/common/src/com/netscape/cms/servlet/admin/JobsAdminServlet.java @@ -177,6 +177,13 @@ public class JobsAdminServlet extends AdminServlet { return; } } else if (op.equals(OpDef.OP_MODIFY)) { + mOp = "modify"; + if ((mToken = super.authorize(req)) == null) { + sendResponse(ERROR, + CMS.getUserMessage(getLocale(req), "CMS_ADMIN_SRVLT_AUTHZ_FAILED"), + null, resp); + return; + } if (scope.equals(ScopeDef.SC_JOBS)) { setSettings(req, resp); } else if (scope.equals(ScopeDef.SC_JOBS_INSTANCE)) { diff --git a/pki/base/common/src/com/netscape/cms/servlet/admin/RegistryAdminServlet.java b/pki/base/common/src/com/netscape/cms/servlet/admin/RegistryAdminServlet.java index ac1049951..44c0e1641 100644 --- a/pki/base/common/src/com/netscape/cms/servlet/admin/RegistryAdminServlet.java +++ b/pki/base/common/src/com/netscape/cms/servlet/admin/RegistryAdminServlet.java @@ -162,8 +162,12 @@ public class RegistryAdminServlet extends AdminServlet { return; getProfileImplConfig(req, resp); } else if (op.equals(OpDef.OP_DELETE)) { + if (!modifyAuthorize(req, resp)) + return; deleteImpl(req, resp); } else if (op.equals(OpDef.OP_ADD)) { + if (!modifyAuthorize(req, resp)) + return; addImpl(req, resp); } else sendResponse(ERROR, INVALID_POLICY_IMPL_OP, |