patchmldonkey, a multi-networks file-sharing client - Patches: patch #5608, Multiuser, chgrp: Prevent change...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

patch #5608: Multiuser, chgrp: Prevent change of file_group to None when user is not file_owner

Submitter:  Hose Bag <user>
Submitted:  Sat 02 Dec 2006 03:58:32 PM UTC
   
 
Category:  None Priority:  5 - Normal
Status:  Done Assigned to:  None
Open/Closed:  Closed

Sat 02 Dec 2006 04:01:15 PM UTC, comment #4: 

Committed 2006/12/02

spiralvoice <spiralvoice>
Group administrator
Sat 02 Dec 2006 03:58:32 PM UTC, comment #3: 

This item has been reassigned from the project mldonkey, a multi-networks file-sharing client bugs tracker to your tracker.

The original report is still available at bugs #18437

Following are the information included in the original report:

[field #0]                  Item ID: 18437
[field #1]                 Group ID: 1409
[field #2]              Open/Closed: Open
[field #3]                 Severity: 3 - Normal
[field #4]                  Privacy: Public
[field #8]                         : Unknown bugs Field Display Type
[field #9]                 Category: None
[field #10]             Submitted by: user
[field #11]              Assigned to: None
[field #12]             Submitted on: Freitag 01.12.2006 um 23:37
[field #13]                  Summary: Multiuser, chgrp: Prevent change of file_group to None when user is not file_owner
[field #14]      Original Submission: example:

  • User usr_one is member of group gr_one (default) and gr_two.
  • User usr_two is member of group gr_two (default) and gr_one.
  • both users are not admin.
  • User usr_one is downloading file file_one (goup of the file is gr_one).


Problem:

usr_two can change the group af the file even if he is not the owner.
[field #16]               Item Group: Program malfunction
[field #17]                   Status: Ready For Test
[field #18]        Component Version: None
[field #19]         Operating System: Linux
[field #20]          Reproducibility: None
[field #21]               Size (loc): None
[field #22]            Fixed Release: None
[field #23]          Planned Release: None
[field #24]                   Effort: 0.00
[field #28]                 Priority: 5 - Normal
[field #31]         Percent Complete: 0%
[field #33]                  Release: 2.8.2
[field #34]                  Release: 2.8.2
[field #58]          Binaries Origin: CVS / Self compiled
[field #59]                 CPU type: Intel x86
[field #60]                      CPU: None
[field #61]     Custom Select Box #4: None
[field #62]     Custom Select Box #5: None
[field #63]     Custom Select Box #6: None
[field #64]     Custom Select Box #7: None
[field #65]     Custom Select Box #8: None
[field #66]     Custom Select Box #9: None
[field #67]    Custom Select Box #10: None

spiralvoice <spiralvoice>
Group administrator
Sat 02 Dec 2006 01:30:54 PM UTC, comment #2: 

Jup, thats it.

only tried it with group "none".

Patch solved the problem. Thx

Hose Bag <user>
Sat 02 Dec 2006 12:18:06 PM UTC, comment #1: 

Reproduced your case.

usr_two could not change the group to gr_two, but to None.
Is this the same bug you saw?

Attached patch fixes this.

(file #11429)

spiralvoice <spiralvoice>
Group administrator
Sat 02 Dec 2006 03:58:32 PM UTC, original submission:  

example:

  • User usr_one is member of group gr_one (default) and gr_two.
  • User usr_two is member of group gr_two (default) and gr_one.
  • both users are not admin.
  • User usr_one is downloading file file_one (goup of the file is gr_one).


Problem:

usr_two can change the group af the file even if he is not the owner.

Hose Bag <user>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #11429:  chgrp.patch added by spiralvoice (898B - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by spiralvoice (Updated the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2006-12-02 spiralvoice StatusNone Done
        Open/ClosedOpen Closed
    2006-12-02 spiralvoice Reassign itemmldonkey, a multi-networks file-sharing client, bug #18437 mldonkey, a multi-networks file-sharing client, patch #5608

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code