I implemented the security requirement when we do impersonation. See http://drupal.org/node/218104

I rolled this for 5 but same applies for 6.

I think this impersonation is more complicated than it needs to be but I have no will to do a full security review right now.

CommentFileSizeAuthor
mw.patch1.43 KBmoshe weitzman

Comments

brmassa’s picture

brmassa commented
Status: Needs review » Fixed

Moshe,

commited to D6. thanks a lot

regards,

massa

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.