diff options
author | karl%kornel.name <> | 2005-11-20 10:31:35 +0100 |
---|---|---|
committer | karl%kornel.name <> | 2005-11-20 10:31:35 +0100 |
commit | 3b2f0ca83f4670d408902a00bfe4264cee5c57aa (patch) | |
tree | 3b684b276d8f99f718c93df6cd75bc8463afbd89 /template/en/default/global/user-error.html.tmpl | |
parent | 5ad7900f7b12f1b81bdc068282b7106be8aae407 (diff) | |
download | bugzilla-3b2f0ca83f4670d408902a00bfe4264cee5c57aa.tar.gz bugzilla-3b2f0ca83f4670d408902a00bfe4264cee5c57aa.tar.xz |
Bug 312441: relogin.cgi allows you to impersonate user accounts you are not allowed to see when 'usevisibilitygroups' is on - Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave
Diffstat (limited to 'template/en/default/global/user-error.html.tmpl')
-rw-r--r-- | template/en/default/global/user-error.html.tmpl | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/template/en/default/global/user-error.html.tmpl b/template/en/default/global/user-error.html.tmpl index be86ae506..e911b39d2 100644 --- a/template/en/default/global/user-error.html.tmpl +++ b/template/en/default/global/user-error.html.tmpl @@ -1128,6 +1128,20 @@ An sudo session (impersonating [% target FILTER html %]) is in progress. End that session (using the link in the footer) before starting a new one. + [% ELSIF error == "sudo_password_required" %] + [% title = "Password Required" %] + Your [% terms.Bugzilla %] password is required to begin a sudo + session. Please <a href="relogin.cgi?action=prepare-sudo&target_login= + [%- target_login FILTER html %]&reason= + [%- reason FILTER html %]">go back</a> and enter your password</a>. + + [% ELSIF error == "sudo_preparation_required" %] + [% title = "Preparation Required" %] + You may not start a sudo session directly. Please + <a href="relogin.cgi?action=prepare-sudo&target_login= + [%- target_login FILTER html %]&reason= + [%- reason FILTER html %]">start your session normally</a>. + [% ELSIF error == "sudo_protected" %] [% title = "User Protected" %] The user [% login FILTER html %] may not be impersonated by sudoers. @@ -1202,6 +1216,11 @@ [% title = "Login Name Required" %] You must enter a login name for the new user. + [% ELSIF error == "user_match_failed" %] + [% title = "Match Failed" %] + <tt>[% name FILTER html %]</tt> does not exist or you are not allowed + to see that user. + [% ELSIF error == "votes_must_be_nonnegative" %] [% title = "Votes Must Be Non-negative" %] Only use non-negative numbers for your [% terms.bug %] votes. |