upd: split certificate issuance as organisation into seperate

[gigi.git] / src / org / cacert / gigi / pages / orga / AffiliationForm.java

diff --git a/src/org/cacert/gigi/pages/orga/AffiliationForm.java b/src/org/cacert/gigi/pages/orga/AffiliationForm.java
index 0191756fcbfa82f4fdb04463408bb11a943d390b..c8dd3e5224a27a199581a2fdf8ed5be996d9f319 100644 (file)
--- a/src/org/cacert/gigi/pages/orga/AffiliationForm.java
+++ b/src/org/cacert/gigi/pages/orga/AffiliationForm.java
@@ -39,9 +39,11 @@ public class AffiliationForm extends Form {
             }
         } else if (req.getParameter("do_affiliate") != null) {
             User byEmail = User.getByEmail(req.getParameter("email"));
-            if (byEmail != null) {
+            if (byEmail != null && byEmail.canAssure()) {
                 o.addAdmin(byEmail, LoginPage.getUser(req), req.getParameter("master") != null);
                 return true;
+            } else {
+                out.println(Page.getLanguage(req).getTranslation("Requested user is not an assurer. We need an assurer here."));
             }
         }
         out.println(Page.getLanguage(req).getTranslation("No action could have been carried out."));