From 3b2f0ca83f4670d408902a00bfe4264cee5c57aa Mon Sep 17 00:00:00 2001
From: "karl%kornel.name" <>
Date: Sun, 20 Nov 2005 09:31:35 +0000
Subject: Bug 312441: relogin.cgi allows you to impersonate user accounts you
 are not allowed to see when 'usevisibilitygroups' is on - Patch by A. Karl
 Kornel <karl@kornel.name> r=LpSolit a=justdave

---
 template/en/default/admin/users/userdata.html.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'template/en/default/admin/users/userdata.html.tmpl')

diff --git a/template/en/default/admin/users/userdata.html.tmpl b/template/en/default/admin/users/userdata.html.tmpl
index f606bb73d..96c9df515 100644
--- a/template/en/default/admin/users/userdata.html.tmpl
+++ b/template/en/default/admin/users/userdata.html.tmpl
@@ -32,7 +32,7 @@
                value="[% otheruser.login FILTER html %]" />
         [% IF !otheruser.groups.bz_sudo_protect %]
           <br />
-          <a href="relogin.cgi?action=sudo&amp;target_login=
+          <a href="relogin.cgi?action=prepare-sudo&amp;target_login=
           [%- otheruser.login FILTER html %]">Impersonate this user</a>
         [% END %]
       [% END %]
-- 
cgit v1.2.3-24-g4f1b