X-Git-Url: https://code.wpia.club/?p=gigi.git;a=blobdiff_plain;f=src%2Forg%2Fcacert%2Fgigi%2Fpages%2Fadmin%2FTTPAdminPage.java;h=cc9a536d8d2970d7330658a0811d7bff617ff125;hp=1bb6e4cd26c22ff324cf11e81f0e542a25b90abf;hb=d945bd512a5d2036d23acec82977106efc8d7f74;hpb=e8011a7009c1e8e918ebe975a11f6f02040d6377 diff --git a/src/org/cacert/gigi/pages/admin/TTPAdminPage.java b/src/org/cacert/gigi/pages/admin/TTPAdminPage.java index 1bb6e4cd..cc9a536d 100644 --- a/src/org/cacert/gigi/pages/admin/TTPAdminPage.java +++ b/src/org/cacert/gigi/pages/admin/TTPAdminPage.java @@ -14,6 +14,7 @@ import org.cacert.gigi.localisation.Language; import org.cacert.gigi.output.Form; import org.cacert.gigi.output.template.IterableDataset; import org.cacert.gigi.pages.Page; +import org.cacert.gigi.pages.error.PageNotFound; public class TTPAdminPage extends Page { @@ -40,10 +41,12 @@ public class TTPAdminPage extends Page { @Override public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException { String path = req.getPathInfo(); - if (path != null && path.length() > PATH.length()) { + if (path != null && path.length() > PATH.length() + 1) { int id = Integer.parseInt(path.substring(1 + PATH.length())); User u = User.getById(id); - if ( !u.isInGroup(TTP_APPLICANT)) { + if (u == null || !u.isInGroup(TTP_APPLICANT)) { + req.setAttribute(PageNotFound.MESSAGE_ATTRIBUTE, "The TTP-request is not available anymore."); + resp.sendError(404); return; } new TTPAdminForm(req, u).output(resp.getWriter(), getLanguage(req), new HashMap()); @@ -82,6 +85,6 @@ public class TTPAdminPage extends Page { @Override public boolean isPermitted(User u) { - return u != null && u.isInGroup(Group.getByString("ttp-assuer")); + return u != null && u.isInGroup(Group.getByString("ttp-assurer")); } }