From: Reini U. <ru...@x-...> - 2004-09-28 14:14:18
|
Arnaud Fontaine schrieb: > Le mar 28/09/2004 =E0 14:39, Reini Urban a =E9crit : >>Arnaud Fontaine schrieb: >>>Another HttpAuth problem is that you can't get Admin privilege ...=20 >>>That's a BIG problem. >> >>Ah! Good catch. >=20 >=20 > I've just checked the _HttpAuthPassUser class. >=20 > In method userExists() wich is called in the class constructor, you set > the user level to WIKIAUTH_USER ... without checking if the user is > admin. >=20 > ... > $this->_level =3D WIKIAUTH_USER; <---- HERE !!!! > return $this; > ... >=20 > hmm ... I'm to lazy to go check the code to find how to correct this ;) > I guess you have to make a _AdminUser object with the login and passwor= d > then call the checkPass method ? Unfortunately, because he can also be a member of the admin group. I'll test a better solution. --=20 Reini Urban http://xarch.tu-graz.ac.at/home/rurban/ |