From a5bcff2e148d2ac394f4b5e022720e75163d0e72 Mon Sep 17 00:00:00 2001
From: cfu <cfu@c9f7a03b-bd48-0410-a16d-cbbf54688b0b>
Date: Tue, 3 Aug 2010 01:06:16 +0000
Subject: Bug 608083  - CC: update ACL and AC calls for DRM

git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1148 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
---
 .../src/com/netscape/cms/servlet/connector/GenerateKeyPairServlet.java  | 2 +-
 .../src/com/netscape/cms/servlet/connector/TokenKeyRecoveryServlet.java | 2 +-
 .../common/src/com/netscape/cms/servlet/csadmin/GetTransportCert.java   | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

(limited to 'pki/base/common')

diff --git a/pki/base/common/src/com/netscape/cms/servlet/connector/GenerateKeyPairServlet.java b/pki/base/common/src/com/netscape/cms/servlet/connector/GenerateKeyPairServlet.java
index 34004767e..e1e24d0e8 100644
--- a/pki/base/common/src/com/netscape/cms/servlet/connector/GenerateKeyPairServlet.java
+++ b/pki/base/common/src/com/netscape/cms/servlet/connector/GenerateKeyPairServlet.java
@@ -242,7 +242,7 @@ public class GenerateKeyPairServlet extends CMSServlet {
 
         try {
             authzToken = authorize(mAclMethod, authToken,
-                        mAuthzResourceName, "read");
+                        mAuthzResourceName, "execute");
         } catch (Exception e) {
         }
 
diff --git a/pki/base/common/src/com/netscape/cms/servlet/connector/TokenKeyRecoveryServlet.java b/pki/base/common/src/com/netscape/cms/servlet/connector/TokenKeyRecoveryServlet.java
index 1a3c2ed1c..504972d95 100644
--- a/pki/base/common/src/com/netscape/cms/servlet/connector/TokenKeyRecoveryServlet.java
+++ b/pki/base/common/src/com/netscape/cms/servlet/connector/TokenKeyRecoveryServlet.java
@@ -284,7 +284,7 @@ public class TokenKeyRecoveryServlet extends CMSServlet {
 
         try {
             authzToken = authorize(mAclMethod, authToken,
-                        mAuthzResourceName, "read");
+                        mAuthzResourceName, "submit");
         } catch (Exception e) {
         }
 
diff --git a/pki/base/common/src/com/netscape/cms/servlet/csadmin/GetTransportCert.java b/pki/base/common/src/com/netscape/cms/servlet/csadmin/GetTransportCert.java
index 841d777fd..21e64086e 100644
--- a/pki/base/common/src/com/netscape/cms/servlet/csadmin/GetTransportCert.java
+++ b/pki/base/common/src/com/netscape/cms/servlet/csadmin/GetTransportCert.java
@@ -108,7 +108,7 @@ public class GetTransportCert extends CMSServlet {
         AuthzToken authzToken = null;
         try {
             authzToken = authorize(mAclMethod, authToken, mAuthzResourceName, 
-              "modify");
+              "read");
             CMS.debug("GetTransportCert authorization successful.");
         } catch (EAuthzAccessDenied e) {
             log(ILogger.LL_FAILURE,
-- 
cgit