3
0
mirror of https://github.com/jlu5/PyLink.git synced 2024-12-25 04:02:45 +01:00

permissions: only whitelist the defined login:user, not all accounts

It's possible for login:user and login:accounts to be used together, although this is discouraged.
This commit is contained in:
James Lu 2019-06-26 13:17:00 -07:00
parent 9a74626d62
commit 4eb0420378

View File

@ -32,7 +32,8 @@ def check_permissions(irc, uid, perms, also_show=[]):
"""
# For old (< 1.1 login blocks):
# If the user is logged in, they automatically have all permissions.
if irc.match_host('$pylinkacc', uid) and conf.conf['login'].get('user'):
olduser = conf.conf['login'].get('user')
if olduser and irc.match_host('$pylinkacc:%s' % olduser, uid):
log.debug('permissions: overriding permissions check for old-style admin user %s',
irc.get_hostmask(uid))
return True