X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=src%2Forg%2Fcacert%2Fgigi%2Fpages%2Faccount%2FMailCertificates.java;h=2fa6ac097e249b35628bf23312c2f5c5302ecdaf;hb=22f27f39d5b62ca5b264b2016daae7e870f78fd8;hp=72a14a312b94bf5e41773c17f61ef353c6116434;hpb=2824d1c165c501e2f3a8809044788b33b81f478a;p=gigi.git

diff --git a/src/org/cacert/gigi/pages/account/MailCertificates.java b/src/org/cacert/gigi/pages/account/MailCertificates.java
index 72a14a31..2fa6ac09 100644
--- a/src/org/cacert/gigi/pages/account/MailCertificates.java
+++ b/src/org/cacert/gigi/pages/account/MailCertificates.java
@@ -34,7 +34,10 @@ public class MailCertificates extends Page {
 			pi = pi.substring(1);
 			int id = Integer.parseInt(pi);
 			Certificate c = new Certificate(id);
-			// TODO check ownership
+			if (LoginPage.getUser(req).getId() != c.getOwnerId()) {
+				out.println(translate(req, "You do not own this certificate."));
+				return;
+			}
 			out.println("<pre>");
 			try {
 				out.print(c.cert());