Roundup Tracker - Issues

Issue 2550502

classification
Fix security issue in cgi/actions.py
Type: security Severity: major
Components: Web interface Versions: devel
process
Status: closed fixed
:
: stefan : richard, stefan
Priority: : patch, patch

Created on 2009-02-10 04:19 by stefan, last changed 2009-02-12 05:06 by stefan.

Files
File name Uploaded Description Edit Remove
actions.py.diff stefan, 2009-02-10 04:19
Messages
msg3531 Author: [hidden] (stefan) Date: 2009-02-10 04:19
The permission checks in cgi/actions.py are incomplete, as they don't
check for individual properties. The attached patch fixes that.
msg3532 Author: [hidden] (richard) Date: 2009-02-12 01:47
Looks good to me.
msg3537 Author: [hidden] (stefan) Date: 2009-02-12 05:06
Fixed with rev:4121
History
Date User Action Args
2009-02-12 05:06:02stefansetstatus: new -> closed
resolution: fixed
messages: + msg3537
keywords: patch, patch
2009-02-12 01:47:04richardsetkeywords: patch, patch
messages: + msg3532
2009-02-10 04:19:52stefancreate