diff options
| author | nbm <nbm@FreeBSD.org> | 2002-03-23 18:04:29 +0800 |
|---|---|---|
| committer | nbm <nbm@FreeBSD.org> | 2002-03-23 18:04:29 +0800 |
| commit | 639d5828b178f88ade5f6862b2fcd27c7f9d31dd (patch) | |
| tree | a51afe580aa31d3a32c13af98ebf2bb9c1e7c455 /www/mod_php4 | |
| parent | 3aac40c6b0aec855d1891ea9b22c08a2a0e0e907 (diff) | |
| download | freebsd-ports-gnome-639d5828b178f88ade5f6862b2fcd27c7f9d31dd.tar.gz freebsd-ports-gnome-639d5828b178f88ade5f6862b2fcd27c7f9d31dd.tar.zst freebsd-ports-gnome-639d5828b178f88ade5f6862b2fcd27c7f9d31dd.zip | |
Implement the HotFix described at
http://www.zope.org/Products/Zope/Hotfix_2002-03-01/README.txt which
says:
``The issue involves the checking of security for objects with proxy
roles. The context of the owner user that created the object with
proxy roles was not being taken into account when determining access
to the object with proxy roles. This flaw could allow users defined
in subfolders of a site with sufficient privileges to access objects
at higher levels in the site that they would not normally be able to
access.''
PR: 36103
Submitted by: HAYASHI Yasushi <yasi@yasi.to>
Diffstat (limited to 'www/mod_php4')
0 files changed, 0 insertions, 0 deletions