check required permission on test connection request (#20)

Co-authored-by: Piotr Lugowski <piotr.lugowski@dynatrace.com>
jenkinsci · Mar 11, 2020 · b6e5570 · b6e5570
1 parent 1e769d4
commit b6e5570
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/main/java/com/dynatrace/jenkins/dashboard/TAGlobalConfiguration.java b/src/main/java/com/dynatrace/jenkins/dashboard/TAGlobalConfiguration.java
@@ -39,6 +39,7 @@ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
 import hudson.util.ListBoxModel;
 import hudson.util.Secret;
 import jenkins.model.GlobalConfiguration;
+import jenkins.model.Jenkins;
 import net.sf.json.JSONObject;
 import org.apache.commons.lang.StringUtils;
 import org.apache.commons.lang.exception.ExceptionUtils;
@@ -186,7 +187,11 @@ public FormValidation doTestDynatraceConnection(
 			@QueryParameter("username") final String username,
 			@QueryParameter("validateCerts") final boolean validateCerts,
 			@QueryParameter("password") final String password) {
-
+		final Jenkins instance = Jenkins.getInstance();
+		if (instance == null) {
+			throw new IllegalStateException("Jenkins instance not available. Could not handle test connection request.");
+		}
+		instance.checkPermission(Jenkins.ADMINISTER);
 		try {
 			final SystemProfiles connection = new SystemProfiles(new DynatraceClient(new BasicServerConfiguration(username, password, protocol.startsWith("https"), host, Integer.parseInt(port), validateCerts, 10000)));
 			try {