[BZ 1361933] createSubject was missing RequiredPermissions annotation

(cherry picked from commit 5f653740f0f2674cfd3185d7e17b343a0ef05c1b)
rhq-project · Nov 22, 2016 · 37dbb49 · 37dbb49
1 parent c47289d
commit 37dbb49
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/...nterprise/server/jar/src/main/java/org/rhq/enterprise/server/auth/SubjectManagerBean.java b/...nterprise/server/jar/src/main/java/org/rhq/enterprise/server/auth/SubjectManagerBean.java
@@ -199,6 +199,7 @@ public Subject updateSubject(Subject whoami, Subject subjectToModify) {
         return entityManager.merge(subjectToModify);
     }
 
+    @RequiredPermission(Permission.MANAGE_SECURITY)
     public Subject createSubject(Subject whoami, Subject subjectToCreate, String password) throws SubjectException,
         EntityExistsException {
         if (getSubjectByName(subjectToCreate.getName()) != null) {