[asterisk-commits] jrose: branch 1.8 r422584 - /branches/1.8/main/manager.c

[SVN commits to the Asterisk project]

Author: jrose
Date: Thu Sep  4 14:51:36 2014
New Revision: 422584

URL: http://svnview.digium.com/svn/asterisk?view=rev&rev=422584
Log:
Manager: Require read permission for SYSTEM in order to send FullyBooted

Review: https://reviewboard.asterisk.org/r/3969/

Modified:
    branches/1.8/main/manager.c

Modified: branches/1.8/main/manager.c
URL: http://svnview.digium.com/svn/asterisk/branches/1.8/main/manager.c?view=diff&rev=422584&r1=422583&r2=422584
==============================================================================
--- branches/1.8/main/manager.c (original)
+++ branches/1.8/main/manager.c Thu Sep  4 14:51:36 2014
@@ -3131,6 +3131,7 @@
 	}
 	astman_send_ack(s, m, "Authentication accepted");
 	if ((s->session->send_events & EVENT_FLAG_SYSTEM)
+		&& (s->session->readperm & EVENT_FLAG_SYSTEM)
 		&& ast_test_flag(&ast_options, AST_OPT_FLAG_FULLY_BOOTED)) {
 		struct ast_str *auth = ast_str_alloca(80);
 		const char *cat_str = authority_to_str(EVENT_FLAG_SYSTEM, &auth);