Skip to content
  • IKEDA Soji's avatar
    [*bug] WWSympa: Multiple bugs on permissions to edit files: · c7918437
    IKEDA Soji authored
      - Owners could view list config files (`info`, templates etc.) even if
        edit_list.conf prohibits.  Fixed by removing unused function viewfile.
      - "Edit list templates" menu lists files prohibited by edit_list.conf.
      - Owners and listmasters could create or modify arbitrary files in the
        server with privileges of sympa user.
    c7918437