Mailing List Archive

Summary: There is a whole in the user/group authorisation system
Product: Bricolage
Version: 1.2.0 - Current Release
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: Admin Tools
AssignedTo: dw@dnai.com
ReportedBy: darren@iterx.org


There is a whole in the user/group authorisation system, whereby somebody with
limited group/user permissions but with membership to the user or group admin
groups, can increase their own permissions (i.e they can upgrade themselves to
become global admins).

http://bricolage-bugzilla.about.com/show_bug.cgi?id=93

_______________________________________________
Bricolage-Bugs mailing list
Bricolage-Bugs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bricolage-bugs