fix: user could add supporter-handled groups

By changing the values of the drop-down menu a user could assign himself
groups that should only be managed by a supporter.

Change-Id: I8f38a0b02f6b71dc0088fea2ddb6b5a4b2bf778b

diff --git a/src/org/cacert/gigi/output/GroupSelector.java b/src/org/cacert/gigi/output/GroupSelector.java
index 66236e1610bb64657381f049b846552eb5240157..a12a5cd49b6bf9b1e4f84f8a958882798fdc7791 100644 (file)
--- a/src/org/cacert/gigi/output/GroupSelector.java
+++ b/src/org/cacert/gigi/output/GroupSelector.java
@@ -28,7 +28,7 @@ public class GroupSelector implements Outputable {
         String vS = r.getParameter(name);
         value = null;
         for (Group g : Group.values()) {
-            if (g.getDatabaseName().equals(vS)) {
+            if (g.getDatabaseName().equals(vS) && g.isManagedBySupport() == supportFlag) {
                 value = g;
             }
         }