summaryrefslogtreecommitdiff
path: root/skel
diff options
context:
space:
mode:
authorDaniel Silverstone <dsilvers@digital-scurf.org>2012-09-03 20:02:24 +0100
committerDaniel Silverstone <dsilvers@digital-scurf.org>2012-09-03 20:02:24 +0100
commit723bdf334969d0e4b1ff1bb17ab24355ae251d44 (patch)
treeea7a02b8ed42b5043bfa47aacfa1882a0cdf0f92 /skel
parent75a45837e6b9a83643a23a46347b4a574251f69f (diff)
downloadgitano-723bdf334969d0e4b1ff1bb17ab24355ae251d44.tar.gz
Cannot be an admin if impersonating them, sorry
Diffstat (limited to 'skel')
-rw-r--r--skel/gitano-admin/rules/core.lace2
1 files changed, 1 insertions, 1 deletions
diff --git a/skel/gitano-admin/rules/core.lace b/skel/gitano-admin/rules/core.lace
index c54dcba..d6b7cd4 100644
--- a/skel/gitano-admin/rules/core.lace
+++ b/skel/gitano-admin/rules/core.lace
@@ -5,7 +5,7 @@ default deny "The ruleset didn't provide access. Denying by default."
include global:defines
# Now, if we're in the admin group, we can always do stuff
-allow "Administrators can do anything" is_admin
+allow "Administrators can do anything" is_admin !is_asanother
# Now let's decide if we can use 'as'
include global:aschecks if_asanother