3c71e8983b
Before this commit, webaccess.checkAccess saved the authorization in user.padAuthorizations[padId] with padId being the read-only pad ID, however later stages, e.g. in PadMessageHandler, use the real pad ID for access checks. This led to authorization being denied. This commit fixes it by only storing and comparing the real pad IDs and not read-only pad IDs. This fixes test case "authn user readonly pad -> 200, ok" in src/tests/backend/specs/socketio.js. |
||
---|---|---|
.. | ||
api | ||
assets | ||
easysync | ||
images | ||
cookies.md | ||
database.md | ||
docker.md | ||
documentation.md | ||
index.md | ||
localization.md | ||
plugins.md | ||
skins.md | ||
stats.md | ||
template.html |