Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
spr0cketeer
Icecast-Server
Commits
a52e2e1a
Commit
a52e2e1a
authored
Jan 05, 2015
by
Philipp Schafft
🦁
Browse files
Fix: SECURITY allow global admins to access all mounts
parent
3d8245f7
Changes
1
Hide whitespace changes
Inline
Side-by-side
src/connection.c
View file @
a52e2e1a
...
...
@@ -1337,7 +1337,8 @@ static void _handle_authentication_global(client_t *client, void *uri, auth_resu
auth_stack_release
(
client
->
authstack
);
client
->
authstack
=
NULL
;
if
(
result
!=
AUTH_NOMATCH
)
{
if
(
result
!=
AUTH_NOMATCH
&&
!
(
result
==
AUTH_OK
&&
client
->
admin_command
!=
-
1
&&
acl_test_admin
(
client
->
acl
,
client
->
admin_command
)
==
ACL_POLICY_DENY
))
{
_handle_authed_client
(
client
,
uri
,
result
);
return
;
}
...
...
@@ -1387,7 +1388,8 @@ static void _handle_authentication_mount_default(client_t *client, void *uri, au
auth_stack_release
(
client
->
authstack
);
client
->
authstack
=
NULL
;
if
(
result
!=
AUTH_NOMATCH
)
{
if
(
result
!=
AUTH_NOMATCH
&&
!
(
result
==
AUTH_OK
&&
client
->
admin_command
!=
-
1
&&
acl_test_admin
(
client
->
acl
,
client
->
admin_command
)
==
ACL_POLICY_DENY
))
{
_handle_authed_client
(
client
,
uri
,
result
);
return
;
}
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment