Disallow credential changes for container authenticated sessions

James Moger

2013-06-17 2f64a2810e14fb990fb7333d257864e67d49acd8

Disallow credential changes for container authenticated sessions

 src/main/java/com/gitblit/GitBlit.java

@@ -681,7 +681,15 @@
     * @return true if the user service supports credential changes
     */
    public boolean supportsCredentialChanges(UserModel user) {
        return (user != null && user.isLocalAccount()) || userService.supportsCredentialChanges();
        if (user == null) {
            return false;
        } else if (!Constants.EXTERNAL_ACCOUNT.equals(user.password)) {
            // credentials likely maintained by Gitblit
            return userService.supportsCredentialChanges();
        } else {
            // credentials are externally maintained
            return false;
        }
    }

    /**