Don't allow registering job over unauthenticated direct connection.
authorZdeněk Salvet <salvet@ics.muni.cz>
Tue, 28 Aug 2007 09:46:36 +0000 (09:46 +0000)
committerZdeněk Salvet <salvet@ics.muni.cz>
Tue, 28 Aug 2007 09:46:36 +0000 (09:46 +0000)
org.glite.lb.server/src/store.c.T

index 4a2fa1d..6c99416 100644 (file)
@@ -535,7 +535,8 @@ static int check_auth(edg_wll_Context ctx,edg_wll_Event *e)
        edg_wll_ResetError(ctx);
 
        if (e->type == EDG_WLL_EVENT_REGJOB) 
-               return strcmp(e->any.user,EDG_WLL_LOG_USER_DEFAULT) ?
+               return ((ctx->isProxy || ctx->peerName) &&
+                               strcmp(e->any.user,EDG_WLL_LOG_USER_DEFAULT)) ?
                        0 : edg_wll_SetError(ctx,EPERM,"can't register jobs anonymously");
 
        trio_asprintf(&q,"select userid from jobs where jobid='%|Ss'",jobid);