diff options
author | Daniel Silverstone <dsilvers@digital-scurf.org> | 2012-09-03 20:02:24 +0100 |
---|---|---|
committer | Daniel Silverstone <dsilvers@digital-scurf.org> | 2012-09-03 20:02:24 +0100 |
commit | 723bdf334969d0e4b1ff1bb17ab24355ae251d44 (patch) | |
tree | ea7a02b8ed42b5043bfa47aacfa1882a0cdf0f92 /skel | |
parent | 75a45837e6b9a83643a23a46347b4a574251f69f (diff) | |
download | gitano-723bdf334969d0e4b1ff1bb17ab24355ae251d44.tar.gz |
Cannot be an admin if impersonating them, sorry
Diffstat (limited to 'skel')
-rw-r--r-- | skel/gitano-admin/rules/core.lace | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/skel/gitano-admin/rules/core.lace b/skel/gitano-admin/rules/core.lace index c54dcba..d6b7cd4 100644 --- a/skel/gitano-admin/rules/core.lace +++ b/skel/gitano-admin/rules/core.lace @@ -5,7 +5,7 @@ default deny "The ruleset didn't provide access. Denying by default." include global:defines # Now, if we're in the admin group, we can always do stuff -allow "Administrators can do anything" is_admin +allow "Administrators can do anything" is_admin !is_asanother # Now let's decide if we can use 'as' include global:aschecks if_asanother |