lib/conjur/command/host_factories.rb in conjur-cli-4.29.0 vs lib/conjur/command/host_factories.rb in conjur-cli-4.30.0

@@ -42,9 +42,12 @@
         owner_role = api.role(options[:ownerid])
 
         layers = (options[:layer] || "").split(/\s/)
         exit_now! "Provide at least one layer" unless layers.count > 0
 
+        unless has_admin?(current_role, owner_role)
+          exit_now! "#{owner_role.id} must be an admin of role '#{owner_role.roleid}' to create a host factory for it" 
+        end
         layers.each do |layerid|
           layer = api.layer(layerid)
           exit_now! "Layer '#{layerid}' does not exist" unless layer.exists?
           unless has_admin?(owner_role, layer.role)
             exit_now! "#{owner_role.id} must be an admin of layer '#{layerid}' to create a host factory for it"