[FIXED HUDSON-1868] Requiring ADMINISTER permission to update description,...

[FIXED HUDSON-1868] Requiring ADMINISTER permission to update description, mainly just because that's what the doConfigSubmit method is doing. This change will be in 1.226.

git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@10157 71c3de6d-444a-0410-be80-ed276b4c234a

core/src/main/java/hudson/model/User.java

@@ -210,6 +210,7 @@ public class User extends AbstractModelObject implements AccessControlled {
      * Accepts the new description.
      */
     public synchronized void doSubmitDescription( StaplerRequest req, StaplerResponse rsp ) throws IOException, ServletException {
+        checkPermission(Hudson.ADMINISTER);
         req.setCharacterEncoding("UTF-8");
 
         description = req.getParameter("description");