Re: [X2go-Dev] [PATCH] Allow users to edit their *own* sessions only

2011-07-25 Thread Mike Gabriel
Hi Reinhard, On Mo 25 Jul 2011 00:10:03 CEST Reinhard Tartler wrote: previously, users could create sessions under wrong uids or delete sessions from other users. This patch implements prevents this by checking the userid of the caller with the session id. +1 from me... [... patch ...]

Re: [X2go-Dev] [PATCH] Allow users to edit their *own* sessions only

2011-07-25 Thread John A. Sullivan III
On Mon, 2011-07-25 at 08:32 +0200, Mike Gabriel wrote: Hi Reinhard, On Mo 25 Jul 2011 00:10:03 CEST Reinhard Tartler wrote: previously, users could create sessions under wrong uids or delete sessions from other users. This patch implements prevents this by checking the userid of the

Re: [X2go-Dev] [PATCH] Allow users to edit their *own* sessions only

2011-07-25 Thread Mike Gabriel
Hi John, On Mo 25 Jul 2011 12:32:44 CEST John A. Sullivan III wrote: On Mon, 2011-07-25 at 08:32 +0200, Mike Gabriel wrote: Hi Reinhard, On Mo 25 Jul 2011 00:10:03 CEST Reinhard Tartler wrote: previously, users could create sessions under wrong uids or delete sessions from other users.

Re: [X2go-Dev] [PATCH] Allow users to edit their *own* sessions only

2011-07-25 Thread Reinhard Tartler
On Mon, Jul 25, 2011 at 12:32:44 (CEST), John A. Sullivan III wrote: On Mon, 2011-07-25 at 08:32 +0200, Mike Gabriel wrote: Hi Reinhard, On Mo 25 Jul 2011 00:10:03 CEST Reinhard Tartler wrote: previously, users could create sessions under wrong uids or delete sessions from other

Re: [X2go-Dev] [PATCH] Allow users to edit their *own* sessions only

2011-07-25 Thread John A. Sullivan III
On Mon, 2011-07-25 at 13:19 +0200, Mike Gabriel wrote: Hi John, On Mo 25 Jul 2011 12:32:44 CEST John A. Sullivan III wrote: On Mon, 2011-07-25 at 08:32 +0200, Mike Gabriel wrote: Hi Reinhard, On Mo 25 Jul 2011 00:10:03 CEST Reinhard Tartler wrote: previously, users could create

[X2go-Dev] [PATCH] Allow users to edit their *own* sessions only

2011-07-24 Thread Reinhard Tartler
previously, users could create sessions under wrong uids or delete sessions from other users. This patch implements prevents this by checking the userid of the caller with the session id. --- x2goserver/lib/x2gosqlitewrapper.pl | 23 --- 1 files changed, 20 insertions(+), 3