Changeset 504

Timestamp:

10/09/09 01:15:38 (15 years ago)

Author:

nanardon

Message:

• check login user can chang password of the user

Location:

LATMOS-Accounts/lib/LATMOS/Accounts/Bases

Files:

• Ad/User.pm (modified) (1 diff)
• Objects.pm (modified) (1 diff)
• Sql/objects.pm (modified) (1 diff)

LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Ad/User.pm

@@ -224 +224 @@
 }
 
-sub set_password {
+sub _set_password {
     my ($self, $clear_pass) = @_;
     my $charmap = Unicode::Map8->new('latin1')  or  die;

LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Objects.pm

@@ -303 +303 @@
 
 sub set_password {
+    my ($self, $clear_pass) = @_;
+    if ($self->base->check_acl($self, 'userPassword', 'w')) {
+        return $self->_set_password($clear_pass);
+    } else {
+        $self->log(LA_ERROR, "Permission denied for %s to change its password",
+            $self->id);
+        return;
+    }
+}
+
+sub _set_password {
     my ($self, $clear_pass) = @_;
     if (my $field = $self->base->get_field_name($self->type, 'userPassword')) {

LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Sql/objects.pm

@@ -420 +420 @@
 }
 
-sub set_password {
+sub _set_password {
     my ($self, $clear_pass) = @_;
     if (my $field = $self->base->get_field_name($self->type, 'userPassword')) {