fix bug #85: allow root@pam to generate tickets for other users

This commit is contained in:
Dietmar Maurer 2012-01-17 06:42:42 +01:00
parent 930dcfc8b0
commit d8a56966bc
3 changed files with 9 additions and 2 deletions

View File

@ -2,7 +2,7 @@ RELEASE=2.0
VERSION=1.0 VERSION=1.0
PACKAGE=libpve-access-control PACKAGE=libpve-access-control
PKGREL=6 PKGREL=7
DESTDIR= DESTDIR=
PREFIX=/usr PREFIX=/usr

View File

@ -150,8 +150,9 @@ __PACKAGE__->register_method ({
my $tmp; my $tmp;
if (($tmp = PVE::AccessControl::verify_ticket($param->{password}, 1)) && if (($tmp = PVE::AccessControl::verify_ticket($param->{password}, 1)) &&
($tmp eq $username)) { ($tmp eq 'root@pam' || $tmp eq $username)) {
# got valid ticket # got valid ticket
# Note: root@pam can create tickets for other users
} else { } else {
$username = PVE::AccessControl::authenticate_user($username, $param->{password}); $username = PVE::AccessControl::authenticate_user($username, $param->{password});
} }

View File

@ -1,3 +1,9 @@
libpve-access-control (1.0-7) unstable; urgency=low
* fix bug #85: allow root@pam to generate tickets for other users
-- Proxmox Support Team <support@proxmox.com> Tue, 17 Jan 2012 06:40:18 +0100
libpve-access-control (1.0-6) unstable; urgency=low libpve-access-control (1.0-6) unstable; urgency=low
* API change: allow to filter enabled/disabled users. * API change: allow to filter enabled/disabled users.