This is the mail archive of the gcc@gcc.gnu.org mailing list for the GCC project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: GNATS

From: Nathanael Nerode <neroden at doctormoo dot dyndns dot org>
To: Gerald Pfeifer <pfeifer at dbai dot tuwien dot ac dot at>
Cc: gcc at gcc dot gnu dot org
Date: Wed, 16 Oct 2002 19:36:13 -0400
Subject: Re: GNATS
References: <20021016210846.GA15210@doctormoo.dyndns.org> <Pine.BSF.4.44.0210162321260.96579-100000@pulcherrima.dbai.tuwien.ac.at>

On Wed, Oct 16, 2002 at 11:23:19PM +0200, Gerald Pfeifer wrote:
> On Wed, 16 Oct 2002, Nathanael Nerode wrote:
> > Oh, this is no good at all.
> >
> > I can't log in as myself.  I can, however, log in as anyone else.
> 
> You can't. It's a user interface bug in gnatsweb which displays the
> username you provided, even if all you got is anonymous read-only access.

Nope, I can. :-P

I just checked.  See pr 6660, which I closed. :-(

To point out the problem without being totally obvious, a system where
people could change their own passwords would not suffer from this
problem.

Ick.

--Nathanael

References:
- GNATS
  - From: Nathanael Nerode
- Re: GNATS
  - From: Gerald Pfeifer

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]