#186 Script sets WIZARD on change and edit

[Lawrence Cotnam Jr.]

This is a really old security hole, and a lot of upstart
mucks have it, because the FBMUF scripts put a WIZARD
bit on cmd-change and cmd-edit, allowing mortals to use
these commands to change wiz-protected properties.

Programs should be corrected, or the W taken off the
script, they shouldn't need more than M2.

[Nobody/Anonymous]

Logged In: NO

Mmmm, they need M3. :) But definitely not WIZARD.

[Points]

Logged In: YES
user_id=7510

Can you name the file and which repository this script
resides in, please?

[Lawrence Cotnam Jr.]

Logged In: YES
user_id=255830

umm... in the fbmuf part of this project's CVS... cmd-
change.muf and cmd-edit.muf... is that what you mean?

[Revar Desmera]

Logged In: YES
user_id=6331

Because wizards use change and edit on objects they don't own,
the programs need to be wizbit, but the permissions checking in
the programs need to be fixed. Those programs predate @props,
and don't have the correct perms checking.

[Wyld]

Updated permissions checking in both cmd-change and cmd-edit. (FB7)