Changeset 2282 for trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Acls.pm

Timestamp:

09/02/19 20:11:12 (5 years ago)

Author:

nanardon

Message:

Ensure users cannot retrieve password, even encrypted

File:

• trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Acls.pm (modified) (1 diff)

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Acls.pm

@@ -29 +29 @@
         }, $class
     );
-    if ($file) {
-        $acls->read_acl_file($file) or return;
-    }
 
     # Default ACLS:
-    $acls->add( '*.log', [ '$uid: read', '*: deny' ] );
+#    $acls->add( '*.log', [ '$uid: read', '*: deny' ] );
     $acls->add(
         'user.{userPasswd,userPassword,encryptedPassword,oldPassword}',
         [ '$uid: write', '*: deny' ],
     );
+
+    if ($file) {
+        $acls->read_acl_file($file) or return;
+    }
+
     $acls
 }