Enforces proper permissions when importing users.

scireum · Mar 1, 2019 · b9bf8d7 · b9bf8d7
1 parent b28fae7
commit b9bf8d7
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/src/main/java/sirius/biz/tenants/jdbc/SQLUserAccountImportJobFactory.java b/src/main/java/sirius/biz/tenants/jdbc/SQLUserAccountImportJobFactory.java
@@ -12,15 +12,19 @@
 import sirius.biz.jobs.batch.file.LineBasedImportJob;
 import sirius.biz.jobs.batch.file.LineBasedImportJobFactory;
 import sirius.biz.process.ProcessContext;
+import sirius.biz.tenants.TenantUserManager;
+import sirius.biz.tenants.UserAccountController;
 import sirius.kernel.di.std.Part;
 import sirius.kernel.di.std.Register;
+import sirius.web.security.Permission;
 
 import javax.annotation.Nonnull;
 
 /**
  * Provides an import job for {@link SQLUserAccount user accounts} stored in a JDBC database.
  */
 @Register(classes = JobFactory.class, framework = SQLTenants.FRAMEWORK_TENANTS_JDBC)
+@Permission(UserAccountController.PERMISSION_MANAGE_USER_ACCOUNTS)
 public class SQLUserAccountImportJobFactory extends LineBasedImportJobFactory {
 
     @Part

diff --git a/src/main/java/sirius/biz/tenants/mongo/MongoUserAccountImportJobFactory.java b/src/main/java/sirius/biz/tenants/mongo/MongoUserAccountImportJobFactory.java
@@ -12,15 +12,18 @@
 import sirius.biz.jobs.batch.file.LineBasedImportJob;
 import sirius.biz.jobs.batch.file.LineBasedImportJobFactory;
 import sirius.biz.process.ProcessContext;
+import sirius.biz.tenants.UserAccountController;
 import sirius.kernel.di.std.Part;
 import sirius.kernel.di.std.Register;
+import sirius.web.security.Permission;
 
 import javax.annotation.Nonnull;
 
 /**
  * Provides an import job for {@link MongoUserAccount user accounts} stored in MongoDB.
  */
 @Register(classes = JobFactory.class, framework = MongoTenants.FRAMEWORK_TENANTS_MONGO)
+@Permission(UserAccountController.PERMISSION_MANAGE_USER_ACCOUNTS)
 public class MongoUserAccountImportJobFactory extends LineBasedImportJobFactory {
 
     @Part