if ( !Permissions.isAuthorized( PolicySpec.VENDOR_IAM, PolicySpec.IAM_RESOURCE_USER, Accounts.getUserFullName( userFound ), account, action, requestUser ) ) {
throw new EuareException( HttpResponseStatus.FORBIDDEN, EuareException.NOT_AUTHORIZED, "Not authorized to update user by " + requestUser.getName( ) );
}
}
try {
<BUG>if ( request.getNewUserName( ) != null && !"".equals( request.getNewUserName( ) ) ) {
userFound.setName( request.getNewUserName( ) );</BUG>
}
<BUG>if ( request.getNewPath( ) != null && !"".equals( request.getNewPath( ) ) ) {
userFound.setPath( sanitizePath( request.getNewPath( ) ) );</BUG>
}

if ( !Permissions.isAuthorized( PolicySpec.VENDOR_IAM, PolicySpec.IAM_RESOURCE_USER, Accounts.getUserFullName( userFound ), account, action, requestUser ) ) {
throw new EuareException( HttpResponseStatus.FORBIDDEN, EuareException.NOT_AUTHORIZED,
"Not authorized to delete access key of " + request.getUserName( ) + "by " + requestUser.getName( ) );
}
}
try {
userFound.removeKey( request.getAccessKeyId( ) );
