Bug #17056 » 17056.patch
| src/usr/local/www/xmlrpc.php | ||
|---|---|---|
|
require_once("config.inc");
|
||
|
require_once("functions.inc");
|
||
|
require_once("auth.inc");
|
||
|
require_once("priv.inc");
|
||
|
require_once("filter.inc");
|
||
|
require_once("ipsec.inc");
|
||
|
require_once("vpn.inc");
|
||
| ... | ... | |
|
* admin (uid = 0) is allowed
|
||
|
* or regular user with necessary privilege
|
||
|
*/
|
||
|
if (isset($user_entry['uid']) && $user_entry['uid'] != '0' &&
|
||
|
if (!isAdminUID($username) &&
|
||
|
!userHasPrivilege($user_entry, 'system-xmlrpc-ha-sync')) {
|
||
|
log_auth_event(LOG_AUTH_EVENT_ERROR, $username, $this->remote_addr, 'not enough privileges');
|
||
- « Previous
- 1
- 2
- Next »