lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add entitytotest test, because a LDAP user can override the entity restriction without this test

Browse Source
This commit is contained in:
Alexis Algoud 2013-12-02 16:04:30 +01:00
parent 38e695b960
commit bb191021de
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/core/login/functions_ldap.php
View File

@ -41,6 +41,7 @@ function check_user_password_ldap($usertotest,$passwordtotest,$entitytotest)
global $dolibarr_main_auth_ldap_admin_login,$dolibarr_main_auth_ldap_admin_pass; global $dolibarr_main_auth_ldap_admin_login,$dolibarr_main_auth_ldap_admin_pass;
global $dolibarr_main_auth_ldap_filter; global $dolibarr_main_auth_ldap_filter;
global $dolibarr_main_auth_ldap_debug; global $dolibarr_main_auth_ldap_debug;
global $mc;
if (! function_exists("ldap_connect")) if (! function_exists("ldap_connect"))
{ {
@ -168,6 +169,9 @@ function check_user_password_ldap($usertotest,$passwordtotest,$entitytotest)
{ {
dol_syslog("functions_ldap::check_user_password_ldap Sync user found id=".$user->id); dol_syslog("functions_ldap::check_user_password_ldap Sync user found id=".$user->id);
// On verifie si le login a change et on met a jour les attributs dolibarr // On verifie si le login a change et on met a jour les attributs dolibarr
$ret=$mc->checkRight($user->id, $entitytotest);
if ($ret < 0) $login=false; // provoque l'echec de l'identification
if ($user->login != $ldap->login && $ldap->login) if ($user->login != $ldap->login && $ldap->login)
{ {
$user->login = $ldap->login; $user->login = $ldap->login;