Changeset 111 for trunk/DNSDB.pm

Timestamp:

08/01/11 19:24:30 (13 years ago)

Author:

Kris Deugau

Message:

/trunk

Add ACL checks to prevent contructed-URL ACL bypasses on SOA records, group
add/edit/delete, axfr import; correct logic in bulk domain ACL check

File:

• trunk/DNSDB.pm (modified) (1 diff)

trunk/DNSDB.pm

@@ -759 +759 @@
                 |c:\d+  # clone
                         # custom.  no, the leading , is not a typo
-                |C:(?:,(?:group|user|domain|record|self)_(?:edit|create|delete))+
+                |C:(?:,(?:group|user|domain|record|self)_(?:edit|create|delete))*
                 )$/x;
 # bleh.  I'd call another function to do my dirty work, but we're in the middle of a transaction already.