From 17ead892826ea59d7bfe6d2bd67359ebf585aee2 Mon Sep 17 00:00:00 2001
From: Steffen Jacobs <steffen.jacobs@oio.de>
Date: Tue, 13 Aug 2019 11:46:54 +0200
Subject: [PATCH] Bug 5085: added permission check for recordUsage method in
 SharedSailingDataImpl

---
 .../src/com/sap/sailing/server/impl/SharedSailingDataImpl.java   | 1 +
 1 file changed, 1 insertion(+)

diff --git a/java/com.sap.sailing.server/src/com/sap/sailing/server/impl/SharedSailingDataImpl.java b/java/com.sap.sailing.server/src/com/sap/sailing/server/impl/SharedSailingDataImpl.java
index f1b307fccb4..30303d8ed2a 100644
--- a/java/com.sap.sailing.server/src/com/sap/sailing/server/impl/SharedSailingDataImpl.java
+++ b/java/com.sap.sailing.server/src/com/sap/sailing/server/impl/SharedSailingDataImpl.java
@@ -239,6 +239,7 @@ public class SharedSailingDataImpl implements ReplicatingSharedSailingData, Clea
 
     @Override
     public void recordUsage(MarkTemplate markTemplate, MarkProperties markProperties) {
+        getSecurityService().checkCurrentUserUpdatePermission(markProperties);
         markProperties.getLastUsedTemplate().put(markTemplate, new MillisecondsTimePoint(System.currentTimeMillis()));
         mongoObjectFactory.storeMarkProperties(deviceIdentifierServiceFinder, markProperties);
     }