Tags:
create new tag
view all tags

Bug: register clobbers TWikiUsers if the user doesn't have read access to that topic

Here's the fix:

*** User.pm     Mon Jun 21 14:18:56 2004
--- User.pm.old Thu Feb 26 17:52:37 2004
***************
*** 233,239 ****
      my ( $wikiName, $remoteUser ) = @_;
      my $today = &TWiki::formatTime(time(), "\$day \$mon \$year", "gmtime");
      my $topicName = $TWiki::wikiUsersTopicname;
!     my( $meta, $text )  = &TWiki::Store::readTopic( $TWiki::mainWebname, $topicName, 1 );
      my $result = "";
      my $status = "0";
      my $line = "";
--- 233,239 ----
      my ( $wikiName, $remoteUser ) = @_;
      my $today = &TWiki::formatTime(time(), "\$day \$mon \$year", "gmtime");
      my $topicName = $TWiki::wikiUsersTopicname;
!     my( $meta, $text )  = &TWiki::Store::readTopic( $TWiki::mainWebname, $topicName );
      my $result = "";
      my $status = "0";
      my $line = "";

Test case

deny read access for (default) users to the TWikiUsers topic, then register a new user. the topic will be replaced with: No read access ...

Environment

TWiki version: TWikiRelease01Feb2003
TWiki plugins: DefaultPlugin, EmptyPlugin, InterwikiPlugin
Server OS:  
Web server:  
Perl version:  
Client OS:  
Web Browser:  

-- JonathanGraehl - 21 Jun 2004

Follow up

for some reason this has already been applied to CairoRelease. (probaly due to some other refactoring). Thankyou for the report. at some stage these BugReports should be made into a suite of tests.

-- SvenDowideit - 27 Jun 2004

I duplicated the fix as part of VariousAuthBugsFixed - sorry smile

-- JG

Fix record

this patch applies to the BejingRelease.

Edit | Attach | Watch | Print version | History: r4 < r3 < r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r4 - 2004-07-08 - JonathanGraehl
 
  • Learn about TWiki  
  • Download TWiki
This site is powered by the TWiki collaboration platform Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2026 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.