Issue 2550502: Fix security issue in cgi/actions.py - Roundup tracker

classification

Title:	Fix security issue in cgi/actions.py
Type:	security	Severity:	major
Components:	Web interface	Versions:	devel

process

Status:	closed	Resolution:	fixed
Dependencies		Superseder:
Assigned To:	stefan	Nosy List:	richard, stefan
Priority:		Keywords:	patch, patch

Created on 2009-02-10 04:19 by stefan, last changed 2009-02-12 05:06 by stefan.

Files
File name	Uploaded	Description	Edit	Remove
actions.py.diff	stefan, 2009-02-10 04:19

Messages
msg3531	Author: [hidden] (stefan)	Date: 2009-02-10 04:19
The permission checks in cgi/actions.py are incomplete, as they don't check for individual properties. The attached patch fixes that.
msg3532	Author: [hidden] (richard)	Date: 2009-02-12 01:47
Looks good to me.
msg3537	Author: [hidden] (stefan)	Date: 2009-02-12 05:06
Fixed with rev:4121

History
Date	User	Action	Args
2009-02-12 05:06:02	stefan	set	status: new -> closed resolution: fixed messages: + msg3537 keywords: patch, patch
2009-02-12 01:47:04	richard	set	keywords: patch, patch messages: + msg3532
2009-02-10 04:19:52	stefan	create