Searched hist:"7 ec464d90fb88e69d3690d59f84747bc52480fa6" (Results 1 – 2 of 2) sorted by relevance
| /dokuwiki/_test/tests/Remote/ |
| H A D | ApiCoreAclCheckTest.php | 7ec464d90fb88e69d3690d59f84747bc52480fa6 Wed Jul 08 13:50:59 UTC 2026 Andreas Gohr <gohr@cosmocode.de> fix(remote): make aclCheck self-check case-insensitive-backend aware
The check gating aclCheck() for other users compared the requested user
against REMOTE_USER verbatim. On a case-insensitive auth backend a user
naming themselves in a different case than their login was treated as a
different user and wrongly denied checking their own ACL. Normalize both
names the way auth_isMember() does before comparing.
The self-check was introduced in 884caed92.
|
| /dokuwiki/inc/Remote/ |
| H A D | ApiCore.php | 7ec464d90fb88e69d3690d59f84747bc52480fa6 Wed Jul 08 13:50:59 UTC 2026 Andreas Gohr <gohr@cosmocode.de> fix(remote): make aclCheck self-check case-insensitive-backend aware
The check gating aclCheck() for other users compared the requested user
against REMOTE_USER verbatim. On a case-insensitive auth backend a user
naming themselves in a different case than their login was treated as a
different user and wrongly denied checking their own ACL. Normalize both
names the way auth_isMember() does before comparing.
The self-check was introduced in 884caed92.
|