You are not logged in.

Announcement

 Téléchargez la dernière version stable de GLPI      -     Et vous, que pouvez vous faire pour le projet GLPI ? :  Contribuer
 Download last stable version of GLPI                      -     What can you do for GLPI ? :  Contribute

#1 2015-09-23 15:30:12

morvanbr
Member
From: Brasil
Registered: 2015-05-05
Posts: 43
Website

Reservation Security Issue

There is a bug in "Tools/Reservations" module. Anyone, even with only "Make a reservation" profile permission enabled, can delete the registers of reservation made by other users. Version of GLPI: 0.85.5.

Offline

#2 2015-09-25 16:56:07

yllen
GLPI-DEV
From: Sillery (51)
Registered: 2008-01-14
Posts: 15,278

Re: Reservation Security Issue


CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

Offline

#3 2015-09-29 16:51:01

morvanbr
Member
From: Brasil
Registered: 2015-05-05
Posts: 43
Website

Re: Reservation Security Issue

Hi. Good to know correction is done. Thanks.

Offline

#4 2015-09-29 19:46:08

morvanbr
Member
From: Brasil
Registered: 2015-05-05
Posts: 43
Website

Re: Reservation Security Issue

Hi. I merged code and received this message:

Parse error: syntax error, unexpected T_BOOLEAN_OR in /var/www/glpi/inc/reservation.class.php on line 753

Wait you can help us. Ver .85.
Edit: I begged a person who messes with code to revert while we receive some f. b. I do not mess directly. I am from Gov.TIC.

Last edited by morvanbr (2015-09-29 20:43:36)

Offline

#5 2015-10-01 10:26:44

yllen
GLPI-DEV
From: Sillery (51)
Registered: 2008-01-14
Posts: 15,278

Re: Reservation Security Issue


CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

Offline

#6 2015-10-01 14:06:21

morvanbr
Member
From: Brasil
Registered: 2015-05-05
Posts: 43
Website

Re: Reservation Security Issue

Good morning.

yllen wrote:

Apply this change: (URL) ...

I will do and will notify you. Thanks.
Edit: 2015-10-01
It worked like a charm. Thanks to all Personnel, specially Yllen, who had all the care with this issue, as always does.

Last edited by morvanbr (2015-10-01 16:04:27)

Offline

#7 2015-10-02 13:41:37

morvanbr
Member
From: Brasil
Registered: 2015-05-05
Posts: 43
Website

Re: Reservation Security Issue

Good morning.
For us, at Seplag, Post can be closed. And thanks again.
Morvan

Offline

Board footer

Powered by FluxBB