GUAC-1101: Note the permission-enforcing nature of each service.

extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/DirectoryObjectService.java

@@ -36,7 +36,8 @@ import org.glyptodon.guacamole.net.auth.permission.ObjectPermissionSet;
 
 /**
  * Service which provides convenience methods for creating, retrieving, and
- * manipulating users.
+ * manipulating users. This service will automatically enforce the
+ * permissions of the current user.
  *
  * @author Michael Jumper
  * @param <ObjectType>

extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/ObjectPermissionService.java

@@ -22,22 +22,15 @@
 
 package net.sourceforge.guacamole.net.auth.mysql.service;
 
-import java.util.Collection;
-import java.util.HashSet;
-import java.util.Set;
 import net.sourceforge.guacamole.net.auth.mysql.AuthenticatedUser;
-import net.sourceforge.guacamole.net.auth.mysql.MySQLUser;
-import net.sourceforge.guacamole.net.auth.mysql.dao.PermissionMapper;
 import org.glyptodon.guacamole.GuacamoleException;
-import org.glyptodon.guacamole.GuacamoleSecurityException;
 import org.glyptodon.guacamole.net.auth.permission.ObjectPermission;
-import org.glyptodon.guacamole.net.auth.permission.ObjectPermissionSet;
-import org.glyptodon.guacamole.net.auth.permission.Permission;
 import org.glyptodon.guacamole.net.auth.permission.PermissionSet;
 
 /**
  * Service which provides convenience methods for creating, retrieving, and
- * deleting object permissions.
+ * deleting object permissions. This service will automatically enforce the
+ * permissions of the current user.
  *
  * @author Michael Jumper
  * @param <ObjectPermissionType>

extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/PermissionService.java

@@ -35,7 +35,8 @@ import org.glyptodon.guacamole.net.auth.permission.Permission;
 
 /**
  * Service which provides convenience methods for creating, retrieving, and
- * deleting permissions.
+ * deleting permissions. This service will automatically enforce the
+ * permissions of the current user.
  *
  * @author Michael Jumper
  * @param <PermissionType>

extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/SystemPermissionService.java

@@ -34,7 +34,8 @@ import org.glyptodon.guacamole.net.auth.permission.SystemPermission;
 
 /**
  * Service which provides convenience methods for creating, retrieving, and
- * deleting system permissions.
+ * deleting system permissions. This service will automatically enforce
+ * the permissions of the current user.
  *
  * @author Michael Jumper
  */