From: Felix Dörre <felix@dogcraft.de>
Date: Sun, 15 Mar 2015 08:25:08 +0000 (+0100)
Subject: Fix: only allow affiliating with org when user is assurer.
X-Git-Url: https://code.wpia.club/?p=gigi.git;a=commitdiff_plain;h=133b7fedbff3ce8d5f4eb6d150e204f615862476;hp=28d0db6545eeebc5bbdbe371b93c69655236922b

Fix: only allow affiliating with org when user is assurer.
---

diff --git a/src/org/cacert/gigi/pages/orga/AffiliationForm.java b/src/org/cacert/gigi/pages/orga/AffiliationForm.java
index 0191756f..ad988895 100644
--- a/src/org/cacert/gigi/pages/orga/AffiliationForm.java
+++ b/src/org/cacert/gigi/pages/orga/AffiliationForm.java
@@ -39,7 +39,7 @@ public class AffiliationForm extends Form {
             }
         } else if (req.getParameter("do_affiliate") != null) {
             User byEmail = User.getByEmail(req.getParameter("email"));
-            if (byEmail != null) {
+            if (byEmail != null && byEmail.canAssure()) {
                 o.addAdmin(byEmail, LoginPage.getUser(req), req.getParameter("master") != null);
                 return true;
             }