Project

General

Profile

Bug #17056 » 17056.patch

Jim Pingle, 08/26/2026 06:26 PM

View differences:

src/usr/local/www/xmlrpc.php
require_once("config.inc");
require_once("functions.inc");
require_once("auth.inc");
require_once("priv.inc");
require_once("filter.inc");
require_once("ipsec.inc");
require_once("vpn.inc");
......
* admin (uid = 0) is allowed
* or regular user with necessary privilege
*/
if (isset($user_entry['uid']) && $user_entry['uid'] != '0' &&
if (!isAdminUID($username) &&
!userHasPrivilege($user_entry, 'system-xmlrpc-ha-sync')) {
log_auth_event(LOG_AUTH_EVENT_ERROR, $username, $this->remote_addr, 'not enough privileges');
(2-2/2)