chiark / gitweb /
~mdw / disorder / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 06bedf4) | patch
SECURITY: server: don't allow local connections to adduser/deluser.
authorRichard Kettlewell <rjk@terraraq.org.uk>
Sun, 31 Jul 2011 15:55:51 +0000 (16:55 +0100)
committerRichard Kettlewell <rjk@terraraq.org.uk>
Sun, 31 Jul 2011 15:55:51 +0000 (16:55 +0100)
commita6e44aa251cf09f060dbc794d35be732d71ce131
tree264410382487dc57a455819f5d3986fd67717301tree | snapshot
parent06bedf43ec0e56b352be511d817f0eab3d0ba539commit | diff
SECURITY: server: don't allow local connections to adduser/deluser.

As of this change, the only thing that needs only RIGHT__LOCAL is
'reminder'.

This has been wrong since eb5dc014179415a0e5476e986519ac96c36221f9
(December 2007) and was first released in DisOrder 3.0.
server/server.c diff | blob | blame | history
Multi-user software jukebox -- https://www.greenend.org.uk/rjk/disorder/