1. 10 Sep, 2012 1 commit
  2. 30 Mar, 2012 1 commit
    • Thomas Sibley's avatar
      Check ACLs on the receiving end when modifying a Template's Queue · 08b7989f
      Thomas Sibley authored
      Users with ModifyTemplate in Queue A must also have ModifyTemplate in the
      receiving queue when moving a template from one queue to another.  When
      making a template global, the actor must have ModifyTemplate globally.
      
      This stricter ACL checking prevents queue admins from moving arbitrary
      templates into other queues in which they have no permissions.
      
      Partially resolves CVE-2011-2084.  Ticket #50901.
      08b7989f
  3. 03 Jan, 2012 1 commit
  4. 03 Mar, 2011 1 commit
  5. 15 Feb, 2011 3 commits
  6. 29 Dec, 2010 1 commit
  7. 28 Dec, 2010 4 commits
  8. 19 Sep, 2010 1 commit
  9. 16 Sep, 2010 1 commit
  10. 17 Aug, 2010 1 commit
  11. 15 Aug, 2010 1 commit
  12. 05 Aug, 2010 3 commits
  13. 30 Jul, 2010 1 commit
  14. 29 Jul, 2010 3 commits
  15. 28 Jul, 2010 2 commits
  16. 27 Jul, 2010 3 commits
  17. 26 Jul, 2010 11 commits
  18. 23 Jul, 2010 1 commit