From: lpsolit%gmail.com <>
Date: Mon, 15 May 2006 23:31:28 +0000 (+0000)
Subject: Bug 337683: The user prefs tab let you change the password and email address of a... 
X-Git-Tag: bugzilla-2.23.2~171
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b3f2421ee9f1a37d3a1fba416fc91b0f66299551;p=thirdparty%2Fbugzilla.git

Bug 337683: The user prefs tab let you change the password and email address of a user being impersonated when using the ENV method (with user_info_class="Env,CGI") - Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit a=justdave
---

diff --git a/Bugzilla.pm b/Bugzilla.pm
index b3c6ba7ce7..d72dba70fa 100644
--- a/Bugzilla.pm
+++ b/Bugzilla.pm
@@ -189,6 +189,9 @@ sub login {
     {
         $_user = $sudo_target;
         $_sudoer = $authenticated_user;
+        # And make sure that both users have the same Auth object,
+        # since we never call Auth::login for the sudo target.
+        $_user->set_authorizer($_sudoer->authorizer);
 
         # NOTE: If you want to do any special logging, do it here.
     }