[jboss-svn-commits] JBL Code SVN: r11215 - in labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects: info and 1 other directory.

[jboss-svn-commits at lists.jboss.org]

Author: wrzep
Date: 2007-04-23 05:03:16 -0400 (Mon, 23 Apr 2007)
New Revision: 11215

Modified:
   labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects/admin/ProjectAdminBean.java
   labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects/info/ProjectInfoAccessBean.java
Log:
project admin: security check before save


Modified: labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects/admin/ProjectAdminBean.java
===================================================================
--- labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects/admin/ProjectAdminBean.java	2007-04-23 08:33:25 UTC (rev 11214)
+++ labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects/admin/ProjectAdminBean.java	2007-04-23 09:03:16 UTC (rev 11215)
@@ -53,10 +53,10 @@
 	
 	public String save() {
 		
-		/* DEBUG
-		if (!FacesTools.isProjectAdminLogged()) {
+		if (!FacesTools.isAllowedToEdit()) {
+			FacesTools.addMessage("Save failed. Operation not permitted.");
 			return ProjectAdminConstants.MESSAGE_ACTION;
-		}*/
+		}
 		
 		Project project = info.getProjectToSave();
 		project.setPages(pages.getPages());

Modified: labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects/info/ProjectInfoAccessBean.java
===================================================================
--- labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects/info/ProjectInfoAccessBean.java	2007-04-23 08:33:25 UTC (rev 11214)
+++ labs/jbosslabs/trunk/portal-extensions/forge-portlets/src/java/org/jboss/forge/projects/info/ProjectInfoAccessBean.java	2007-04-23 09:03:16 UTC (rev 11215)
@@ -33,8 +33,6 @@
 	
 	public boolean isProjectAdminLogged() {
 		
-		//return isUserLogged();
-		//return FacesTools.isProjectAdminLogged();
 		return FacesTools.isAllowedToEdit();
 	}