Log Message:
-----------
fix for security aspect of bug #715 -- reject calls with @_ != 2.
Modified Files:
--------------
webwork2/lib/WeBWorK:
Authz.pm
Revision Data
-------------
Index: Authz.pm
===================================================================
RCS file: /webwork/cvs/system/webwork2/lib/WeBWorK/Authz.pm,v
retrieving revision 1.20
retrieving revision 1.21
diff -Llib/WeBWorK/Authz.pm -Llib/WeBWorK/Authz.pm -u -r1.20 -r1.21
--- lib/WeBWorK/Authz.pm
+++ lib/WeBWorK/Authz.pm
@@ -143,6 +143,8 @@
# This currently only uses two of it's arguments, but it accepts any number, in
# case in the future calculating certain permissions requires more information.
sub hasPermissions {
+ die "hasPermissions called with != 2 arguments" unless @_ == 2;
+
my ($self, $userID, $activity) = @_;
my $r = $self->{r};
my $ce = $r->ce;
|
