HttpServletRequest request,
HttpServletResponse response)
throws Exception {
ActionErrors errors = new ActionErrors();
ActionMessages msgs = new ActionMessages();
RollerSession rses = RollerSession.getRollerSession(request);
MemberPermissionsPageModel model =
new MemberPermissionsPageModel(request, response, mapping);
// Ensure use has admin perms for this weblog
if (model.getWebsite() != null && rses.isUserAuthorizedToAdmin(model.getWebsite())) {
UserManager userMgr = RollerFactory.getRoller().getUserManager();
Iterator iter = model.getPermissions().iterator();
int removed = 0;
int changed = 0;
while (iter.hasNext()) {
PermissionsData perms = (PermissionsData)iter.next();
String sval = request.getParameter("perm-" + perms.getId());
if (sval != null) {
short val = Short.parseShort(sval);
UserData user = rses.getAuthenticatedUser();
if (perms.getUser().getId().equals(user.getId())
&& val < perms.getPermissionMask()) {
errors.add(null,new ActionError(
"memberPermissions.noSelfDemotions"));
} else if (val != perms.getPermissionMask()) {