UPD: Only show "assure someone" if the user actually can assure

[gigi.git] / src / org / cacert / gigi / pages / wot / AssurePage.java

diff --git a/src/org/cacert/gigi/pages/wot/AssurePage.java b/src/org/cacert/gigi/pages/wot/AssurePage.java
index 1dae379c18a7d69cebb9438b6f402e50a016d52d..28b3f4e905faf20fc5bd040e5ed15f9ab6f5c73a 100644 (file)
--- a/src/org/cacert/gigi/pages/wot/AssurePage.java
+++ b/src/org/cacert/gigi/pages/wot/AssurePage.java
@@ -51,6 +51,16 @@ public class AssurePage extends Page {
         }
     }
 
+    @Override
+    public boolean isPermitted(User u) {
+        try {
+            return u != null && u.canAssure();
+        } catch (SQLException e) {
+            e.printStackTrace();
+            return false;
+        }
+    }
+
     private void outputForm(HttpServletRequest req, PrintWriter out, int mid, AssuranceForm form) {
         User myself = LoginPage.getUser(req);
         AssuranceResult check = Notary.checkAssuranceIsPossible(myself, new User(mid));
@@ -58,7 +68,7 @@ public class AssurePage extends Page {
             out.println(translate(req, check.getMessage()));
             return;
         }
-        if (form == null || form.assuree.getId() != mid) {
+        if (form == null || form.getAssuree().getId() != mid) {
             form = new AssuranceForm(req, mid);
         }
 
@@ -70,7 +80,7 @@ public class AssurePage extends Page {
         PrintWriter out = resp.getWriter();
         String pi = req.getPathInfo().substring(PATH.length());
         if (pi.length() > 1) {
-            User myself = LoginPage.getUser(req);
+            User myself = getUser(req);
             int mid = Integer.parseInt(pi.substring(1));
             if (mid == myself.getId()) {
                 out.println(translate(req, "Cannot assure myself."));
@@ -78,7 +88,7 @@ public class AssurePage extends Page {
             }
 
             AssuranceForm form = Form.getForm(req, AssuranceForm.class);
-            if (mid != form.assuree.getId()) {
+            if (mid != form.getAssuree().getId()) {
                 return;
             }
             if (form.submit(out, req)) {