Disallow credential changes for container authenticated sessions

James Moger

2013-06-17 2f64a2810e14fb990fb7333d257864e67d49acd8

 src/main/java/com/gitblit/GitBlit.java

@@ -681,7 +681,15 @@
    * @return true if the user service supports credential changes
    */
   public boolean supportsCredentialChanges(UserModel user) {
      return (user != null && user.isLocalAccount()) || userService.supportsCredentialChanges();
      if (user == null) {
         return false;
      } else if (!Constants.EXTERNAL_ACCOUNT.equals(user.password)) {
         // credentials likely maintained by Gitblit
         return userService.supportsCredentialChanges();
      } else {
         // credentials are externally maintained
         return false;
      }
   }

   /**