From: Wolfgang M. M. <wol...@us...> - 2004-07-02 16:54:05
|
Update of /cvsroot/exist/eXist-1.0/src/org/exist/xquery/functions/transform In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv15785/src/org/exist/xquery/functions/transform Modified Files: Transform.java Log Message: Fixed resource read/write permissions check. Index: Transform.java =================================================================== RCS file: /cvsroot/exist/eXist-1.0/src/org/exist/xquery/functions/transform/Transform.java,v retrieving revision 1.7 retrieving revision 1.8 diff -C2 -d -r1.7 -r1.8 *** Transform.java 28 May 2004 10:54:23 -0000 1.7 --- Transform.java 2 Jul 2004 16:53:55 -0000 1.8 *************** *** 52,55 **** --- 52,56 ---- import org.exist.memtree.MemTreeBuilder; import org.exist.memtree.Receiver; + import org.exist.security.Permission; import org.exist.security.PermissionDeniedException; import org.exist.xquery.BasicFunction; *************** *** 296,299 **** --- 297,302 ---- xslDoc = (DocumentImpl) context.getBroker().getDocument(path); + if(!xslDoc.getPermissions().validate(context.getUser(), Permission.READ)) + throw new TransformerException("Insufficient privileges to read resource " + path); } catch (PermissionDeniedException e) { throw new TransformerException(e.getMessage(), e); |