[FIXED SECURITY-180]

c826a1b8 · Kohsuke Kawaguchi · 25411a0b · c826a1b8
隐藏空白更改
内联并排

Showing with 1 addition and 0 deletion

core/src/main/java/jenkins/security/ApiTokenProperty.java core/src/main/java/jenkins/security/ApiTokenProperty.java +1 -0

未找到文件。
--- a/core/src/main/java/jenkins/security/ApiTokenProperty.java
+++ b/core/src/main/java/jenkins/security/ApiTokenProperty.java
@@ -81,6 +81,7 @@ public class ApiTokenProperty extends UserProperty {
    }

    public void changeApiToken() throws IOException {
+        user.checkPermission(Jenkins.ADMINISTER);
        _changeApiToken();
        if (user!=null)
            user.save();