tyler.durden/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2025-07-31 01:34:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

Don't rely on case sensitive usernames in navigation items stored in INI files

Browse Source 
refs #11051
This commit is contained in:
Alexander A. Klimov 2016-02-10 16:22:51 +01:00
parent 001c63e376
commit a5924f2ca8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
library/Icinga/Application/Web.php
View File

@ -172,7 +172,7 @@ class Web extends EmbeddedWeb
{ {
// TODO: Provide a more sophisticated solution // TODO: Provide a more sophisticated solution
if (isset($config['owner']) && $config['owner'] === $this->user->getUsername()) { if (isset($config['owner']) && strtolower($config['owner']) === strtolower($this->user->getUsername())) {
unset($config['owner']); unset($config['owner']);
unset($config['users']); unset($config['users']);
unset($config['groups']); unset($config['groups']);
@ -195,7 +195,7 @@ class Web extends EmbeddedWeb
if (isset($config['users'])) { if (isset($config['users'])) {
$users = array_map('trim', explode(',', strtolower($config['users']))); $users = array_map('trim', explode(',', strtolower($config['users'])));
if (in_array('*', $users, true) || in_array($this->user->getUsername(), $users, true)) { if (in_array('*', $users, true) || in_array(strtolower($this->user->getUsername()), $users, true)) {
unset($config['owner']); unset($config['owner']);
unset($config['users']); unset($config['users']);
unset($config['groups']); unset($config['groups']);