Author: clee
Date: 2007-03-22 16:19:16 -0800 (Thu, 22 Mar 2007)
New Revision: 3828
URL: http://svn.hyperic.org/?view=rev&root=Hyperic+HQ&revision=3828
Modified:
trunk/src/org/hyperic/hq/authz/server/session/RoleManagerEJBImpl.java
Log:
[HQ-608]
Superuser user should never be deleted
Modified: trunk/src/org/hyperic/hq/authz/server/session/RoleManagerEJBImpl.java
===================================================================
--- trunk/src/org/hyperic/hq/authz/server/session/RoleManagerEJBImpl.java 2007-03-22 23:50:12 UTC (rev 3827)
+++ trunk/src/org/hyperic/hq/authz/server/session/RoleManagerEJBImpl.java 2007-03-23 00:19:16 UTC (rev 3828)
@@ -347,6 +347,11 @@
*/
public void removeRole(AuthzSubjectValue whoami, Integer rolePk)
throws RemoveException, PermissionException {
+ // Don't delete the super user role
+ if (rolePk.equals(AuthzConstants.rootRoleId)) {
+ throw new RemoveException("Superuser role cannot be removed");
+ }
+
Role roleLocal = getRoleDAO().findById(rolePk);
PermissionManager pm = PermissionManagerFactory.getInstance();
|
