Protect DownloadZipServlet with an AccessRestrictionFilter.

James Moger

2011-09-26 78753bc22f140f863aa3fe56b1c59699ca3e2fa8

 src/com/gitblit/wicket/pages/LoginPage.java

@@ -69,6 +69,11 @@
            UserModel user = GitBlit.self().authenticate(username, password);

            if (user == null) {

               error("Invalid username or password!");

            } else if (user.username.equals(Constants.FEDERATION_USER)) {

               // disallow the federation user from logging in via the

               // web ui

               error("Invalid username or password!");

               user = null;

            } else {

               loginUser(user);

            }