UPD: Only show "assure someone" if the user actually can assure

[gigi.git] / src / org / cacert / gigi / pages / wot / AssurePage.java

diff --git a/src/org/cacert/gigi/pages/wot/AssurePage.java b/src/org/cacert/gigi/pages/wot/AssurePage.java
index 0e9bc4196354848c487f3219dfed546c9af7b5ad..28b3f4e905faf20fc5bd040e5ed15f9ab6f5c73a 100644 (file)
--- a/src/org/cacert/gigi/pages/wot/AssurePage.java
+++ b/src/org/cacert/gigi/pages/wot/AssurePage.java
@@ -51,6 +51,16 @@ public class AssurePage extends Page {
         }
     }
 
+    @Override
+    public boolean isPermitted(User u) {
+        try {
+            return u != null && u.canAssure();
+        } catch (SQLException e) {
+            e.printStackTrace();
+            return false;
+        }
+    }
+
     private void outputForm(HttpServletRequest req, PrintWriter out, int mid, AssuranceForm form) {
         User myself = LoginPage.getUser(req);
         AssuranceResult check = Notary.checkAssuranceIsPossible(myself, new User(mid));
@@ -58,7 +68,7 @@ public class AssurePage extends Page {
             out.println(translate(req, check.getMessage()));
             return;
         }
-        if (form == null || form.assuree.getId() != mid) {
+        if (form == null || form.getAssuree().getId() != mid) {
             form = new AssuranceForm(req, mid);
         }
 
@@ -78,7 +88,7 @@ public class AssurePage extends Page {
             }
 
             AssuranceForm form = Form.getForm(req, AssuranceForm.class);
-            if (mid != form.assuree.getId()) {
+            if (mid != form.getAssuree().getId()) {
                 return;
             }
             if (form.submit(out, req)) {