add validation to special perms on account #22

	# Docs for the Azure Web Apps Deploy action: https://github.com/Azure/webapps-deploy
	# More GitHub Actions for Azure: https://github.com/Azure/actions

	name: Build and deploy JAR app to Azure Web App - ics-server

	on:
	push:
	branches:
	- production
	workflow_dispatch:

	jobs:
	build:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- name: Set up Java version
	uses: actions/setup-java@v4
	with:
	java-version: '17'
	distribution: 'microsoft'

	- name: Build with Maven
	run: mvn clean install

	- name: Upload artifact for deployment job
	uses: actions/upload-artifact@v4
	with:
	name: java-app
	path: '${{ github.workspace }}/target/*.jar'

	deploy:
	runs-on: ubuntu-latest
	needs: build
	environment:
	name: 'Production'
	url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}
	permissions:
	id-token: write #This is required for requesting the JWT

	steps:
	- name: Download artifact from build job
	uses: actions/download-artifact@v4
	with:
	name: java-app

	- name: Login to Azure
	uses: azure/login@v2
	with:
	client-id: ${{ secrets.AZUREAPPSERVICE_CLIENTID_47180AD36C444E51A27C1ADA0CDEF93C }}
	tenant-id: ${{ secrets.AZUREAPPSERVICE_TENANTID_342B1F169E8C4D36AB9595BABABF4336 }}
	subscription-id: ${{ secrets.AZUREAPPSERVICE_SUBSCRIPTIONID_9B288E9C5D79442C9777F654D8C5D59F }}

	- name: Deploy to Azure Web App
	id: deploy-to-webapp
	uses: azure/webapps-deploy@v3
	with:
	app-name: 'ics-server'
	slot-name: 'Production'
	package: '*.jar'

Provide feedback