X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=src%2Forg%2Fcacert%2Fgigi%2FdbObjects%2FCertificateProfile.java;h=5704497986388f70123d5bf7230839bed85fde0d;hb=4de35d0ba81eadeceb437dace9e06ef59caa2b39;hp=6f57b3ec0a7d1a848841e60b1c099d425ef50552;hpb=a0232b6e40e7e09767f0444d24e18bf12dafc362;p=gigi.git

diff --git a/src/org/cacert/gigi/dbObjects/CertificateProfile.java b/src/org/cacert/gigi/dbObjects/CertificateProfile.java
index 6f57b3ec..57044979 100644
--- a/src/org/cacert/gigi/dbObjects/CertificateProfile.java
+++ b/src/org/cacert/gigi/dbObjects/CertificateProfile.java
@@ -260,7 +260,15 @@ public class CertificateProfile implements IdCachable {
                     return false;
                 }
             } else if (s.equals("codesign")) {
-                if (actor.isInGroup(Group.CODESIGNING)) {
+                if ( !actor.isInGroup(Group.CODESIGNING)) {
+                    return false;
+                }
+            } else if (s.equals("ocsp")) {
+                if ( !(owner instanceof Organisation)) {
+                    return false;
+                }
+                Organisation o = (Organisation) owner;
+                if ( !o.isSelfOrganisation()) {
                     return false;
                 }
             } else {