[Commotion-admin] [luci-commotion] Main system page allows changing form values (eg. adding ssh keys) without password (#155)

areynold notifications at github.com
Wed Feb 19 21:44:29 UTC 2014


Looks like only the authorized_keys field is ignoring password validation. The keys.write function at the end of admin.lua will write whenever the form field contains data, regardless of the form status.

The other form fields appear to save changes without the correct password but are not actually saving or to disk.

---
Reply to this email directly or view it on GitHub:
https://github.com/opentechinstitute/luci-commotion/issues/155#issuecomment-35552833
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.chambana.net/pipermail/commotion-admin/attachments/20140219/cac7cbbb/attachment.html>


More information about the Commotion-admin mailing list