From 7d075e394580b6618d2001f46928cb2465bad0ca Mon Sep 17 00:00:00 2001
From: Anton Tananaev <anton.tananaev@gmail.com>
Date: Sat, 8 Oct 2016 15:49:20 +1300
Subject: Add back-end readonly checks

---
 src/org/traccar/api/resource/UserResource.java | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src/org/traccar/api/resource')

diff --git a/src/org/traccar/api/resource/UserResource.java b/src/org/traccar/api/resource/UserResource.java
index 2d187fe9d..7790dc908 100644
--- a/src/org/traccar/api/resource/UserResource.java
+++ b/src/org/traccar/api/resource/UserResource.java
@@ -64,6 +64,9 @@ public class UserResource extends BaseResource {
             Context.getPermissionsManager().checkAdmin(getUserId());
         } else {
             Context.getPermissionsManager().checkUser(getUserId(), entity.getId());
+            if (!entity.getReadonly()) {
+                Context.getPermissionsManager().checkReadonly(entity.getId());
+            }
         }
         Context.getPermissionsManager().updateUser(entity);
         if (Context.getNotificationManager() != null) {
-- 
cgit v1.2.3