Romain Quetiez c641161e17 Fixed a security hole: any user was allowed to edit users and profiles, and therefore could give himself admin rights - now, only admins are allowed to do that ...

Also added a debugging capability: user rights shown for any object class, on demand in URP_Users::DisplayBareRelations()

SVN:code[178]

2009-09-17 15:50:28 +00:00

tags

- Bug fix: emailed URL was still wrong for lists of objects

2009-07-18 13:27:05 +00:00

trunk

Fixed a security hole: any user was allowed to edit users and profiles, and therefore could give himself admin rights - now, only admins are allowed to do that

2009-09-17 15:50:28 +00:00

Description

No description provided

cmdbhacktoberfesthelpdeskimpact-analysisitilitopit-servicesitsmticket

288 MiB

Languages

PHP 87.6%

JavaScript 5%

SCSS 2.7%

Twig 2.3%

CSS 2.2%

Other 0.1%