Project

General

Profile

Actions
Copy link

Bug #6088

closed
PH JP

RADIUS WebUI - Deny Config Write is not honored

Bug #6088: RADIUS WebUI - Deny Config Write is not honored

Added by Phillip Hernandez over 10 years ago. Updated over 10 years ago.

Status:
Resolved
Priority:
High
Assignee:
Jim Pingle
Category:
Web Interface
Target version:
2.3.1
Start date:
04/07/2016
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:

Description

After authenticating with a user that has been put into a group with "Deny Config Write" it is not enforced. If you create a local user in that same group it is enforced as expected.

PH Updated by Phillip Hernandez over 10 years ago Actions
Copy link
 #1

For clarity, when the user is authenticated with RADIUS and the deny config write is set it is not enforced.

JP Updated by Jim Pingle over 10 years ago Actions
Copy link
 #2

  • Status changed from New to Assigned
  • Assignee set to Jim Pingle
  • Target version set to 2.3
  • Affected Version set to 2.3

Confirmed, working on a fix now.

JP Updated by Jim Pingle over 10 years ago Actions
Copy link
 #3

  • Target version changed from 2.3 to 2.3.1

Looking at the code, this is not a regression. It will be good to fix, but the fix is non-trivial so it's better to hold it back for the next point release.

JP Updated by Jim Pingle over 10 years ago Actions
Copy link
 #4

  • Status changed from Assigned to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:0ef6fddce9a48e7e1abac04c5dc59c0d7a99e83d.

PH Updated by Phillip Hernandez over 10 years ago Actions
Copy link
 #5

I wanted to confirm that this works. I created a custom patch to apply to my pfsense boxes that are running 2.2.6 and Deny Config Write is now honored.

Thanks

JP Updated by Jim Pingle over 10 years ago Actions
Copy link
 #6

  • Status changed from Feedback to Resolved

Thanks for the additional testing

CB Updated by Chris Buechler over 10 years ago Actions
Copy link
 #7

  • Affected Version changed from 2.3 to All
Actions
Copy link

Also available in: Atom