Manager: Require read permission for SYSTEM in order to send FullyBooted

Review: https://reviewboard.asterisk.org/r/3969/

git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.8@422584 65c4cc65-6c06-0410-ace0-fbb531ad65f3

diff --git a/main/manager.c b/main/manager.c
index 27b6739ca812f770349c7d49ebaa3627d520f78f..f65a159e6175a809c311d34fdac80d56a97dfd2a 100644 (file)
--- a/main/manager.c
+++ b/main/manager.c
@@ -3131,6 +3131,7 @@ static int action_login(struct mansession *s, const struct message *m)
        }
        astman_send_ack(s, m, "Authentication accepted");
        if ((s->session->send_events & EVENT_FLAG_SYSTEM)
+               && (s->session->readperm & EVENT_FLAG_SYSTEM)
                && ast_test_flag(&ast_options, AST_OPT_FLAG_FULLY_BOOTED)) {
                struct ast_str *auth = ast_str_alloca(80);
                const char *cat_str = authority_to_str(EVENT_FLAG_SYSTEM, &auth);