From 1ea21b63e99ed627a7992d27bd90e56d436dd55c Mon Sep 17 00:00:00 2001 From: "lpsolit%gmail.com" Date: Mon, 15 May 2006 16:31:28 +0000 Subject: [PATCH] Bug 337683: The user prefs tab let you change the password and email address of a user being impersonated when using the ENV method (with user_info_class="Env,CGI") - Patch by Max Kanat-Alexander r=LpSolit a=justdave --- webtools/bugzilla/Bugzilla.pm | 3 +++ 1 file changed, 3 insertions(+) diff --git a/webtools/bugzilla/Bugzilla.pm b/webtools/bugzilla/Bugzilla.pm index b3c6ba7ce7e8..d72dba70fa74 100644 --- a/webtools/bugzilla/Bugzilla.pm +++ b/webtools/bugzilla/Bugzilla.pm @@ -189,6 +189,9 @@ sub login { { $_user = $sudo_target; $_sudoer = $authenticated_user; + # And make sure that both users have the same Auth object, + # since we never call Auth::login for the sudo target. + $_user->set_authorizer($_sudoer->authorizer); # NOTE: If you want to do any special logging, do it here. }