stv0g/tvheadend
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

DVR: api - fix the dvr config entry create perm check

Browse source
This commit is contained in:
Jaroslav Kysela 2014-09-01 16:46:19 +02:00
parent df7c00d122
commit 3c64f87d96
2 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/api/api_dvr.c
View file

@ -71,7 +71,8 @@ api_dvr_config_create
return EINVAL;
if (s[0] == '\0')
return EINVAL;
if (access_verify2(perm, ACCESS_RECORDER_ALL | ACCESS_RECORDER))
if (access_verify2(perm, ACCESS_ADMIN) &&
access_verify2(perm, ACCESS_RECORDER_ALL | ACCESS_RECORDER))
return EACCES;
pthread_mutex_lock(&global_lock);

4
src/dvr/dvr_db.c
View file

@ -1964,7 +1964,9 @@ dvr_config_class_perm(idnode_t *self, access_t *a, htsmsg_t *msg_to_write)
dvr_config_t *cfg = (dvr_config_t *)self;
if (access_verify2(a, ACCESS_RECORDER))
return -1;
if (access_verify2(a, ACCESS_ADMIN) && access_verify2(a, ACCESS_RECORDER_ALL))
if (!access_verify2(a, ACCESS_ADMIN))
return 0;
if (access_verify2(a, ACCESS_RECORDER_ALL))
return 0;
if (strcmp(cfg->dvr_config_name ?: "", a->aa_username ?: ""))
return -1;