From f39100f35e48369b47cab7dd85918dc948f2af44 Mon Sep 17 00:00:00 2001 From: Tony Mack Date: Wed, 16 Dec 2009 02:20:30 +0000 Subject: [PATCH] pl_genicw is allowed to call all methods --- api.py | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/api.py b/api.py index 350cb25..015893b 100644 --- a/api.py +++ b/api.py @@ -65,12 +65,9 @@ class APIRequestHandler(SimpleXMLRPCServer.SimpleXMLRPCRequestHandler): xid = struct.unpack('3i', ucred)[1] caller_name = pwd.getpwuid(xid)[0] # Special case the genicw - if method_name == "AdminTicket": - if caller_name == PLC_SLICE_PREFIX+"_genicw": - try: result = method(*args) - except Exception, err: raise xmlrpclib.Fault(104, 'Error in call: %s' %err) - else: - raise xmlrpclib.Fault(108, '%s: Permission denied.' % caller_name) + if caller_name == PLC_SLICE_PREFIX+"_genicw": + try: result = method(*args) + except Exception, err: raise xmlrpclib.Fault(104, 'Error in call: %s' %err) # Anyone can call these functions elif method_name not in ('Help', 'Ticket', 'GetXIDs', 'GetSSHKeys'): # Authenticate the caller if not in the above fncts. -- 2.43.0